CLSA-2026:1790590713 TuxCare License Agreement 0 - CVE-2026-42217: reject IDManifest variable-length integers whose shift reaches 64 bits, avoiding undefined behaviour in readVariableLengthInteger() Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42217: reject IDManifest variable-length integers whose shift reaches 64 bits, avoiding undefined behaviour in readVariableLengthInteger()

0 tuxcare-almalinux9.8-esu openexr-3.1.1-3.el9_8.4.tuxcare.els1.aarch64.rpm 82c5a7ba91e88b5c48cac84d4297e746851184cdae66d193226cce01a52b2c51 openexr-3.1.1-3.el9_8.4.tuxcare.els1.i686.rpm 257197f8b2099e6358bd2880744c779e75f0fe92ffc6b9ae6319ef0f4d842fb2 openexr-3.1.1-3.el9_8.4.tuxcare.els1.x86_64.rpm f1ecad16c166140ee1b0db6e7b2870ee0187a93a966c7df3f51defa69aacaeeb openexr-devel-3.1.1-3.el9_8.4.tuxcare.els1.aarch64.rpm db682b9ca9ec9a48682465d474792b4d3d65b2246b3438a3c1b193d75fa1f5c6 openexr-devel-3.1.1-3.el9_8.4.tuxcare.els1.i686.rpm 729d64d6debd121940104447bfd95f7913f2f8fbc68ee53f94461eb370d467b0 openexr-devel-3.1.1-3.el9_8.4.tuxcare.els1.x86_64.rpm c8c3b5bf53b1e3dea779e17c1358944e1ac7520c4e0c91ee1b8226efe70d727a openexr-libs-3.1.1-3.el9_8.4.tuxcare.els1.aarch64.rpm 3de3dd6805e0661a49929cde035f68d0d672a565d3ea52720df6aa1ca290be60 openexr-libs-3.1.1-3.el9_8.4.tuxcare.els1.i686.rpm 88fcccdbf7dc95532bd73eb1e7b885642469168e3e90d67211347e78747f2c6d openexr-libs-3.1.1-3.el9_8.4.tuxcare.els1.x86_64.rpm b281a766bb2da762fabf682623c8b76c741f2bbdb32e4799a0c96681c401e547 CLSA-2026:1790603127 TuxCare License Agreement 0 - CVE-2026-32775: buffer overwrite via underflow in exif_mnote_data_get_value() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32775: buffer overwrite via underflow in exif_mnote_data_get_value()

0 tuxcare-almalinux9.8-esu libexif-0.6.22-6.el9_8.1.tuxcare.els1.aarch64.rpm 989aa88d1276b383db939fd187d5fc7be7b75f566e833511bc1adfdbc1e3caa9 libexif-0.6.22-6.el9_8.1.tuxcare.els1.i686.rpm 84d8e5840e796dbaa0a6fbd807bd24be044edf25f22de5439a20ca48abf1efdf libexif-0.6.22-6.el9_8.1.tuxcare.els1.x86_64.rpm a161841ba5868092624e7bff3b51b6658e31bf6901c0f7c74d1e59c8300b0d87 libexif-devel-0.6.22-6.el9_8.1.tuxcare.els1.aarch64.rpm d8abfbd637753e79d61b041854350c6773442ac26fa10c7366df5b3dd7acb801 libexif-devel-0.6.22-6.el9_8.1.tuxcare.els1.i686.rpm eaa6b15bbecdaa5f48af07fbf801b367a431bfff698ca3d7bbcd8ce3fef614c7 libexif-devel-0.6.22-6.el9_8.1.tuxcare.els1.x86_64.rpm f01f03d23902a2ed38f24fa38d9927aea99f7381c97d143a81bb4d43b01475a0 libexif-doc-0.6.22-6.el9_8.1.tuxcare.els1.aarch64.rpm 8ec446d295706252ecc96150bceaaebf1d2a67564f6e27066b05a0e127eab675 libexif-doc-0.6.22-6.el9_8.1.tuxcare.els1.i686.rpm 9edea70999b94feb2fccf6b539457513977e80fe3b820ee57989e9abc6ec5a9f libexif-doc-0.6.22-6.el9_8.1.tuxcare.els1.x86_64.rpm 813b4ade651fc13716fdfea089712330c52b1c5e9de9b27cac5081ef7e5dfd65 CLSA-2026:1790607732 TuxCare License Agreement 0 - CVE-2026-32316: heap overflow in jvp_string_append/copy_replace_bad() - CVE-2026-49839: heap out-of-bounds write in jv_load_file() (--rawfile) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32316: heap overflow in jvp_string_append/copy_replace_bad() - CVE-2026-49839: heap out-of-bounds write in jv_load_file() (--rawfile)

0 tuxcare-almalinux9.8-esu jq-1.6-19.el9_8.2.tuxcare.els1.aarch64.rpm d191dd176a5a9d568038b68e394020aa2f7b46c7e6f07748962d407379ad6450 jq-1.6-19.el9_8.2.tuxcare.els1.i686.rpm e7834655fc323908f3ac1ae0b9b1df56444d1e9317a4189653afb9eac64b48a9 jq-1.6-19.el9_8.2.tuxcare.els1.x86_64.rpm 9ec6180ab9a986683c046bf919d452ec9dd1876b46f4346eed006af74dfbef36 jq-devel-1.6-19.el9_8.2.tuxcare.els1.aarch64.rpm e8bd0fe92c7ec98884f9931b093965f31572f57370d30e25e854be0328dc4cdc jq-devel-1.6-19.el9_8.2.tuxcare.els1.i686.rpm 6a870b02c47013714ae97a3c294fb139a9be36c7bfc642b3c5e59816925947c7 jq-devel-1.6-19.el9_8.2.tuxcare.els1.x86_64.rpm bcffd33d4c52c6453de68fde36afce3c4b40033815f60b2df2d4055b71f43b0a CLSA-2026:1790612067 TuxCare License Agreement 0 - CVE-2026-6276: cookie leak via stale custom Host cookiehost on handle reuse Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6276: cookie leak via stale custom Host cookiehost on handle reuse

0 tuxcare-almalinux9.8-esu curl-7.76.1-40.el9_8.7.tuxcare.els1.aarch64.rpm d26d6c11cf875e3e6337774f825cb302e6de2788ef415479bdde5768f9716621 curl-7.76.1-40.el9_8.7.tuxcare.els1.i686.rpm 56b9f258b9a365b4e18456f12e9722bce805ca667480ca8db5790f4b64b96291 curl-7.76.1-40.el9_8.7.tuxcare.els1.x86_64.rpm e1ae72809d43bc2ba259e7941e5b9cd081316269a80ccf9e7d529911d51b4cfb curl-minimal-7.76.1-40.el9_8.7.tuxcare.els1.aarch64.rpm c44d623f4ecb1b5cc88a07501729d8130cef2a01dbcd592375ba47af5d099160 curl-minimal-7.76.1-40.el9_8.7.tuxcare.els1.i686.rpm a78afb0095c7ee5016760d44049f3e0936b87ef09d2456b43eecc0661fb3d4a4 curl-minimal-7.76.1-40.el9_8.7.tuxcare.els1.x86_64.rpm 5e9d86f29df4be685c4c16eead705f4003c089c410ae8742a827e521750bb224 libcurl-7.76.1-40.el9_8.7.tuxcare.els1.aarch64.rpm 28bf9da560f1cf308198f2ed72aba7d38faf8ab1fac8dde25bb7d9f54c57563f libcurl-7.76.1-40.el9_8.7.tuxcare.els1.i686.rpm 90f22d9f69afe21268051fb788ed55316c486f7a5f0bec3101712475e40e9610 libcurl-7.76.1-40.el9_8.7.tuxcare.els1.x86_64.rpm 40bfc867c595a8adee392880e53770901274ac9fecd476d1ae5feff3eea70ef8 libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els1.aarch64.rpm f5f2b8a35ebaa1932e93793d1011c211480adc06937bde9076e3873c1a665eee libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els1.i686.rpm 03454ea98d89478253fd90d5c72261315827abc9de6da5356823fc7c93af9a0e libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els1.x86_64.rpm 570160a726353a5cefe7314b4cef57ddb9cbe67533291c4289dff03cc5ed240a libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els1.aarch64.rpm 304ff227bfd642457ffd9b75dddd56aaa02215967f0b63703293dd6357d61307 libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els1.i686.rpm 00424704aebcae9e1b31f39029a370e302bd5d108e81a5d854e48ea2977527f1 libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els1.x86_64.rpm 3c2aa3c4948ac577da712eba3422ec6bfa5170a230e501d87769d6a5856233e9 CLSA-2026:1790594044 TuxCare License Agreement 0 - CVE-2023-45853: reject zip header fields longer than 65535 bytes in minizip's zipOpenNewFileInZip4_64() to avoid an integer overflow and heap buffer overflow Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-45853: reject zip header fields longer than 65535 bytes in minizip's zipOpenNewFileInZip4_64() to avoid an integer overflow and heap buffer overflow

0 tuxcare-almalinux9.8-esu minizip-compat-1.2.11-40.el9.tuxcare.els1.aarch64.rpm 2854b49d1b43d277e680f8ffc7a5ffb147bd438a68eaa5af3fd12b23e6e00bd7 minizip-compat-1.2.11-40.el9.tuxcare.els1.i686.rpm 052957c0b77e670dc06c4c5f3ad5458e94b3180387e0a8492bd14410e9165620 minizip-compat-1.2.11-40.el9.tuxcare.els1.x86_64.rpm b8601e0afece6136291e27c11f98ca3c532d0f7339dd725cd3e31e43b876407c minizip-compat-devel-1.2.11-40.el9.tuxcare.els1.aarch64.rpm bf486d026e5dff3bd0dc2be8e52d1cea4e88e5d4f2e27acc0904d5d277a45e64 minizip-compat-devel-1.2.11-40.el9.tuxcare.els1.i686.rpm 2c7c99619ab26312d12ec1f276230daf2730ae7ef02a4d0d2f11b9c31eb06bab minizip-compat-devel-1.2.11-40.el9.tuxcare.els1.x86_64.rpm 9b5316aeddc7325223411c8a6c84b795789368e762efa314c951c2a792daa654 zlib-1.2.11-40.el9.tuxcare.els1.aarch64.rpm 4559b7b42c54427c76c7af28bb3e310cc02ba4048c668f51e798db3464cb8354 zlib-1.2.11-40.el9.tuxcare.els1.i686.rpm d713ccbeb14bf0de3b2abe7a0063d53bee0d6435f6a6ab8ae6ca626fcab007d5 zlib-1.2.11-40.el9.tuxcare.els1.x86_64.rpm 9649ff73eedbd054ca3b8e2c49e39d12ac319ba131a21e57d3d420d80480e283 zlib-devel-1.2.11-40.el9.tuxcare.els1.aarch64.rpm 96f50581566bd371149959907f37b50b650f7f3cebb4beab69b1c6f1259a81a4 zlib-devel-1.2.11-40.el9.tuxcare.els1.i686.rpm 6f05cce4ea73a34fd54ae22cc150f08571cac251c0ba6b92bc19de34af733904 zlib-devel-1.2.11-40.el9.tuxcare.els1.x86_64.rpm 066600777af7c8b2cf076bf9a0bd11b90bb66562815703fdff806006425884f7 zlib-static-1.2.11-40.el9.tuxcare.els1.aarch64.rpm 97bb2d4d6d7453b64ff12b822132f110f81deb6e22e31a45d763f1f569746822 zlib-static-1.2.11-40.el9.tuxcare.els1.i686.rpm b3318dbdcae4545706b280220fb77e25035d25a0ad0e3ee7fad27a059bd918ee zlib-static-1.2.11-40.el9.tuxcare.els1.x86_64.rpm 97286508480251669bc0cb195b77d20a3572f647a919de7f83ceb641b6717185 CLSA-2026:1790700282 TuxCare License Agreement 0 - Add Alma9_8ESU; carry the tuxcare9.6esu CVE fixes - CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization - CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices - CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion - CVE-2025-27836: fix potential print buffer overflow in BJ10V device - CVE-2024-29508: fix heap-based pointer disclosure in pdf_base_font_alloc - CVE-2025-48708: fix argument sanitization to redact values supplied with '#' separator - CVE-2024-46955: out-of-bounds read when reading a color in Indexed color space - CVE-2025-59798: buffer overrun in pdf_write_cmap in the pdfwrite device - CVE-2025-59799: stack buffer overflow in pdfmark_coerce_dest in the pdfwrite device - CVE-2023-52722: reject non-standard eexec seeds in SAFER mode (psi/zmisc1.c) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Add Alma9_8ESU; carry the tuxcare9.6esu CVE fixes - CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization - CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices - CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion - CVE-2025-27836: fix potential print buffer overflow in BJ10V device - CVE-2024-29508: fix heap-based pointer disclosure in pdf_base_font_alloc - CVE-2025-48708: fix argument sanitization to redact values supplied with '#' separator - CVE-2024-46955: out-of-bounds read when reading a color in Indexed color space - CVE-2025-59798: buffer overrun in pdf_write_cmap in the pdfwrite device - CVE-2025-59799: stack buffer overflow in pdfmark_coerce_dest in the pdfwrite device - CVE-2023-52722: reject non-standard eexec seeds in SAFER mode (psi/zmisc1.c)

0 tuxcare-almalinux9.8-esu ghostscript-9.54.0-19.el9_6.tuxcare.els6.aarch64.rpm d383ce8388eab6bc082622e3d32f4c145bbe1642a8d3ed9013d2ba9884635d50 ghostscript-9.54.0-19.el9_6.tuxcare.els6.i686.rpm 0c1edbf0a37172aca7751c25bb41a0efaaccf0d505c4930614a0a9f0b09ebf63 ghostscript-9.54.0-19.el9_6.tuxcare.els6.x86_64.rpm b017a4b8c85ab03212b61822f412ae52198c9c373941dd7a98b288b0ca3998ef ghostscript-doc-9.54.0-19.el9_6.tuxcare.els6.noarch.rpm 99703d29667f559e2c4616fe08ae44941c7270d58196338aac30993ebf8d2a8c ghostscript-gtk-9.54.0-19.el9_6.tuxcare.els6.aarch64.rpm 87293164653ae25698f1d5542e9ca5af24cdb65161267b45d0b8d74f8c5ddc04 ghostscript-gtk-9.54.0-19.el9_6.tuxcare.els6.i686.rpm 1caad9c603ee502324f65607849b8bad54ce1d98333945cdeba5847d8fa0c8f9 ghostscript-gtk-9.54.0-19.el9_6.tuxcare.els6.x86_64.rpm 07992306efb26b480d8df82135ada853048c88beca9759b1def084362f128385 ghostscript-tools-dvipdf-9.54.0-19.el9_6.tuxcare.els6.aarch64.rpm 4ef961d3c2a63218392767e6f7b4766918e606ad37ceac756438fedb15404abe ghostscript-tools-dvipdf-9.54.0-19.el9_6.tuxcare.els6.i686.rpm e0f42b343a4481a7191bbed24ea55e187fb726aca4dcd75d6fcae633a1288038 ghostscript-tools-dvipdf-9.54.0-19.el9_6.tuxcare.els6.x86_64.rpm d1bfc6066c42ec39917bee5de6518ce1ffac4d330b1b54646ef413abee76bffc ghostscript-tools-fonts-9.54.0-19.el9_6.tuxcare.els6.aarch64.rpm a88c4c2a52f0be35e250b1577e824b1c45e415d8d4590ca86ec416f85780a268 ghostscript-tools-fonts-9.54.0-19.el9_6.tuxcare.els6.i686.rpm 757cc41681a90a59a9f458003f658e15f59f6861e30581da8e1b6443ad0289c3 ghostscript-tools-fonts-9.54.0-19.el9_6.tuxcare.els6.x86_64.rpm e8dda5b16b6674f88d6bab22cd21734ecb3b299d10bbfeb9323878e9416d2b6f ghostscript-tools-printing-9.54.0-19.el9_6.tuxcare.els6.aarch64.rpm 3cc7954a948c2642d8a974ed23c4b73601a58b377c94de947e5585638fb19ea9 ghostscript-tools-printing-9.54.0-19.el9_6.tuxcare.els6.i686.rpm bc1be4a85adfea90c81dff178d132d16ae5cedfad54d998c73bbf1b96463b0ca ghostscript-tools-printing-9.54.0-19.el9_6.tuxcare.els6.x86_64.rpm 5cca92aeefac28d4f2808140b4c6e786fd231b74844a27bf4559c3324f101957 ghostscript-x11-9.54.0-19.el9_6.tuxcare.els6.aarch64.rpm 2b5e6ce3875b40410ac54e379306caef3861f62bb71e38f89e2e3208e65ab486 ghostscript-x11-9.54.0-19.el9_6.tuxcare.els6.i686.rpm c69f3512560c958c7a15a1c23365ab83179312ea2f6605160d7094a42b9bb80e ghostscript-x11-9.54.0-19.el9_6.tuxcare.els6.x86_64.rpm 12c0122d16a77181cf27368213088146f62ffdc802b62838c652e4111a17ed5d libgs-9.54.0-19.el9_6.tuxcare.els6.aarch64.rpm c7373c7a70352e770d047684ccbde2b1545c07d2649b102770862a1d4ae93bac libgs-9.54.0-19.el9_6.tuxcare.els6.i686.rpm 812aa42a3a72cb8639c0aa9d0d41ea1e484e791beef6f1c31ca3f89095418b35 libgs-9.54.0-19.el9_6.tuxcare.els6.x86_64.rpm 328b7ea14b63e9da54579356c87aed7fc7b8c97c002441ea31775e8e0ee16851 libgs-devel-9.54.0-19.el9_6.tuxcare.els6.aarch64.rpm bf2fd72b94e761edf18b5e719ac34fbce4938bf79e0260909b551a2f07c38aab libgs-devel-9.54.0-19.el9_6.tuxcare.els6.i686.rpm 3ddf49a07ed32d1883aaf422be1fcd90e8c208db5e3642e7a2e4ff4137aea838 libgs-devel-9.54.0-19.el9_6.tuxcare.els6.x86_64.rpm 23a8fe42f959c2fc0eefbf613946c8eb27361a77365287d848c700f8ef310647 CLSA-2026:1790785222 TuxCare License Agreement 0 - CVE-2026-40468: fix integer overflow of the result-buffer offset in do_sub() - CVE-2026-40469: fix integer overflow of the result-buffer size in do_sub() on 32-bit builds Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40468: fix integer overflow of the result-buffer offset in do_sub() - CVE-2026-40469: fix integer overflow of the result-buffer size in do_sub() on 32-bit builds

0 tuxcare-almalinux9.8-esu gawk-5.1.0-6.el9.tuxcare.els1.aarch64.rpm cf90172bad1abbd67f8922bc58d484147c40dab2e445d22a79429f1ab4ab4def gawk-5.1.0-6.el9.tuxcare.els1.i686.rpm c8b53a766e467760262b7ca06f0225be6402b6d3b0b009dabbaead9b27a5ceed gawk-5.1.0-6.el9.tuxcare.els1.x86_64.rpm 7e0fbd5d661452376f221330ef1e14b20c24b4cad8db3428b3160b3d796539b4 gawk-all-langpacks-5.1.0-6.el9.tuxcare.els1.aarch64.rpm f8cd505cad7528d5ce725e5f42f45deb3c3693607c6b91a6be4cefcf3926d4ee gawk-all-langpacks-5.1.0-6.el9.tuxcare.els1.i686.rpm c558e38e9815f0a701a568a9064ad41216ac7c02d5ae60b57d4919903544075b gawk-all-langpacks-5.1.0-6.el9.tuxcare.els1.x86_64.rpm 916dfd8a985b1fd7de7f4de678cc7b6db3c349361f4953f768bb8fcaed590fc8 gawk-devel-5.1.0-6.el9.tuxcare.els1.aarch64.rpm 1dc38044bf2d42a20f54348fb977df0835424df7a69f90cbcec0b63e922e0c71 gawk-devel-5.1.0-6.el9.tuxcare.els1.i686.rpm e4ed138040c366a2a0730c496686c6a0d50a2791d574dd9d1a15ebe5200c5709 gawk-devel-5.1.0-6.el9.tuxcare.els1.x86_64.rpm 05d0f9c725206c393fc028f80723f33b9a7696cdcd013d8ef63d22680140872f gawk-doc-5.1.0-6.el9.tuxcare.els1.noarch.rpm fe0648bf008968f24130d15d59e960c8470491d44a33f06c27dd824b75e6eb7a CLSA-2026:1790819071 TuxCare License Agreement 0 - CVE-2025-69720: stack buffer overflow in infocmp analyze_string() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-69720: stack buffer overflow in infocmp analyze_string()

0 tuxcare-almalinux9.8-esu ncurses-6.2-12.20210508.el9.tuxcare.els1.aarch64.rpm 8237be4ca2d477c7fa3cff35115ba29255b2564ae5198b0a99723ae0473e15ab ncurses-6.2-12.20210508.el9.tuxcare.els1.i686.rpm 3452cf33ddda8f719bfdadd89c8804e4056865b8917a0b6076822c1ccfe0c0f4 ncurses-6.2-12.20210508.el9.tuxcare.els1.x86_64.rpm 32aff1cbf60e9a4a41535e72d1e7a9b538f05f3bcfa5ad916378e21f7f777264 ncurses-base-6.2-12.20210508.el9.tuxcare.els1.noarch.rpm 1836a6f75850816eace5dbdea09f90fe5796c9d8cc0efe723e15388817f89377 ncurses-c++-libs-6.2-12.20210508.el9.tuxcare.els1.aarch64.rpm 00939325ffc7494c25286fdacc64908394e40a24326185386eb5d0ebc746b18c ncurses-c++-libs-6.2-12.20210508.el9.tuxcare.els1.i686.rpm 806117b1944932102de748e150e61cb65237e75f5d479d405db0dbf7abe7ac55 ncurses-c++-libs-6.2-12.20210508.el9.tuxcare.els1.x86_64.rpm 9ca32f9b1254655e5d4b06b4337faad61a573ef5a0e5c0ae552736da1591f0d1 ncurses-compat-libs-6.2-12.20210508.el9.tuxcare.els1.aarch64.rpm 5cf9252c17b75e012479a2b5ae786ea0c4800222a96ce42b0c07dd6939ade1c5 ncurses-compat-libs-6.2-12.20210508.el9.tuxcare.els1.i686.rpm 4a59ce5d55aca3b4d3469e2b5c1be0ce20c2e8f39621a7b30b53d7a6d6c5c758 ncurses-compat-libs-6.2-12.20210508.el9.tuxcare.els1.x86_64.rpm aeab2bec158afbed11b360175a73274853c5902052f441d7138900bda9a1fe5d ncurses-devel-6.2-12.20210508.el9.tuxcare.els1.aarch64.rpm 34728e6dea02a8dfc4d02c142632f669d4462bca7179afdf1e1f7243dae0ff7b ncurses-devel-6.2-12.20210508.el9.tuxcare.els1.i686.rpm 4e88f2b4464f5d9b6742dd2df622918feb24f1004e7cb11856dd0b29a96d9a94 ncurses-devel-6.2-12.20210508.el9.tuxcare.els1.x86_64.rpm ae55fc713cfb0193b2eb45d1fa6ac9a9d27d0fb4d89a39d32d2d3b6deaca19b4 ncurses-libs-6.2-12.20210508.el9.tuxcare.els1.aarch64.rpm bc6eb8cd7f97032affbd6599656eacfa076610b1886fae5354db7490ce9ae1a4 ncurses-libs-6.2-12.20210508.el9.tuxcare.els1.i686.rpm 6f72e4405fd4e64ca7d3a7cc1c42f7337335a4526e6cbea35ba3412987acb62b ncurses-libs-6.2-12.20210508.el9.tuxcare.els1.x86_64.rpm 87654708658d44c606645b9178169bc2fa1f5d7661398975adc276bc9e50f96c ncurses-static-6.2-12.20210508.el9.tuxcare.els1.aarch64.rpm 5ff18477b2ac0622293c924273deb05469846d24d9f7a30d482cb3d44cacd3d2 ncurses-static-6.2-12.20210508.el9.tuxcare.els1.i686.rpm 65818e8973becbc3d926bddd1ac47c0f9fd50ca09a3b1814725116806b1ecef5 ncurses-static-6.2-12.20210508.el9.tuxcare.els1.x86_64.rpm f3feda8d0b964bdf4f12713b9225f5df8c018d2c80bcdd8e7de64c1c566a52bf ncurses-term-6.2-12.20210508.el9.tuxcare.els1.noarch.rpm be98427732d7801eac52456810eed75771a449ac18dfb5adad1ed4532b340b9f CLSA-2026:1790819334 TuxCare License Agreement 0 - CVE-2023-35945: memory leak in nghttp2_session_mem_send_internal() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-35945: memory leak in nghttp2_session_mem_send_internal()

0 tuxcare-almalinux9.8-esu libnghttp2-1.43.0-6.el9_8.2.tuxcare.els1.aarch64.rpm 943f930eebe0cfd4d981b57081c607b8c72c2b019b6906e85e482da9d1425c37 libnghttp2-1.43.0-6.el9_8.2.tuxcare.els1.i686.rpm 0cee11c94da4aed65dce35b15561ffa1f13a5ea545adaafc882f9b352c37fef1 libnghttp2-1.43.0-6.el9_8.2.tuxcare.els1.x86_64.rpm 66dd14c98d1981f7d950e5865527735b7562368525c0748ffe26c155ec6daa11 libnghttp2-devel-1.43.0-6.el9_8.2.tuxcare.els1.aarch64.rpm 9c1ed118f7836a15ecc0526193165991481fafdfbd0a6661fdee02d315ecbb89 libnghttp2-devel-1.43.0-6.el9_8.2.tuxcare.els1.i686.rpm 8016f80027d92beee1ef1cd5cf028ecbed299869fcf3b601781eda2f5b181bbf libnghttp2-devel-1.43.0-6.el9_8.2.tuxcare.els1.x86_64.rpm 41c1364f8382a8559561caf3baa3902fe925c73b386e0bd38d92b17c78dd6bcf nghttp2-1.43.0-6.el9_8.2.tuxcare.els1.aarch64.rpm 3a70b5e1cc94a5009ea2bb788aa79887214a716ad1d12f020fc578e9a52bf29f nghttp2-1.43.0-6.el9_8.2.tuxcare.els1.i686.rpm 5a0b41332293584deddfec7286e83b5279beffad36871e8a27a35b883e13dfed nghttp2-1.43.0-6.el9_8.2.tuxcare.els1.x86_64.rpm 6fd1b4cb9355ab3856f61e66b19c12cdd8cde7b271a07b9bf0e1f1ac17ff6a0a CLSA-2026:1790865850 TuxCare License Agreement 0 - CVE-2025-52194: undefined float-to-int conversion in ircam_read_header() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-52194: undefined float-to-int conversion in ircam_read_header()

0 tuxcare-almalinux9.8-esu libsndfile-1.0.31-9.el9_8.1.tuxcare.els1.aarch64.rpm e890867880a5c7261776b36c35b12c4b53f329c965d12b40c65a75880890df65 libsndfile-1.0.31-9.el9_8.1.tuxcare.els1.i686.rpm b2abb74215051b3ad0502016076e9ca369689216d1175d5d5e99ed61231a5f7c libsndfile-1.0.31-9.el9_8.1.tuxcare.els1.x86_64.rpm 329fa1ff2d87e85daa0ed1ccd439187aa96d07793ed9213c64c7b2c4eb71b78f libsndfile-devel-1.0.31-9.el9_8.1.tuxcare.els1.aarch64.rpm 4187de34a97ca35f690dec51671698e32d59d69188340112badf7eff721c98e5 libsndfile-devel-1.0.31-9.el9_8.1.tuxcare.els1.i686.rpm 981ea8376c9823d5f197884132a91b932ab00c97c823c3d51419a2916a7215aa libsndfile-devel-1.0.31-9.el9_8.1.tuxcare.els1.x86_64.rpm 35618c25d659836a333c81349e215f95eebdcdf6c772bbb8e2ddbbf4da969d41 libsndfile-utils-1.0.31-9.el9_8.1.tuxcare.els1.aarch64.rpm 6568074ca24dca536500a75333d7e5008bf29aa8017ef33756db6f984df00234 libsndfile-utils-1.0.31-9.el9_8.1.tuxcare.els1.i686.rpm 87608ddffb73575b7e71a781bc31ce51224d3228243f322dd78dfdd1eabf74ec libsndfile-utils-1.0.31-9.el9_8.1.tuxcare.els1.x86_64.rpm be44ce9acae6295fd55ade3157501ee2d74d19314c63afa01acec5afa5494cc2 CLSA-2026:1790866801 TuxCare License Agreement 0 - CVE-2026-3731: heap out-of-bounds read in sftp_extensions_get_name/data() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3731: heap out-of-bounds read in sftp_extensions_get_name/data()

0 tuxcare-almalinux9.8-esu libssh-0.10.4-19.el9_8.tuxcare.els1.aarch64.rpm acf0e9206ffff5c55fed4081d748ff36fc9a5cfe22d5d4f81afdd97975b6ae4c libssh-0.10.4-19.el9_8.tuxcare.els1.i686.rpm c55dd7cd29a791d492a1e63ab3f7bb2167e6f6a2fd6ff342defa571e9bf03d7a libssh-0.10.4-19.el9_8.tuxcare.els1.x86_64.rpm 4b2990a1d08a50749053b920daabb234d32cca4c10223682604593b300d7d22f libssh-config-0.10.4-19.el9_8.tuxcare.els1.noarch.rpm b4e6733be7c93524811b8c6012a5e8c294940d04d5b266ed96c229efe490dc8e libssh-devel-0.10.4-19.el9_8.tuxcare.els1.aarch64.rpm 283d82c7240f8b46b98859262dc240a04b72c7cf603302c5102dab8d610368fe libssh-devel-0.10.4-19.el9_8.tuxcare.els1.i686.rpm 8c70f3c5a70ebc6660e9ea2f3112b98421ceb8496e878a6a047779d6553455e0 libssh-devel-0.10.4-19.el9_8.tuxcare.els1.x86_64.rpm 542b669efcb4ec7b695e4b24221a285283c579d91096c7197698ec1f14b3c192 CLSA-2026:1790871317 TuxCare License Agreement 0 - CVE-2026-60000: pre-auth resource exhaustion in input_gssapi_errtok(), GSSAPI error tokens were not counted against MaxAuthTries Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-60000: pre-auth resource exhaustion in input_gssapi_errtok(), GSSAPI error tokens were not counted against MaxAuthTries

0 tuxcare-almalinux9.8-esu openssh-9.9p1-11.el9_8.tuxcare.els1.aarch64.rpm aa319c4102634558d8ec13ec7c2da11f746249cd1c5f7c901efe8d3344ae4327 openssh-9.9p1-11.el9_8.tuxcare.els1.i686.rpm 84b19aa1d398b10b2ca45c46cadd71f2d8e940bbffb2f7d4acee890aa7631a09 openssh-9.9p1-11.el9_8.tuxcare.els1.x86_64.rpm 49235579941e66e0f4ad3219d13a023f6c6ea33797f5b103910d861f090cc6d7 openssh-askpass-9.9p1-11.el9_8.tuxcare.els1.aarch64.rpm c81578baafe2472ce5f3e9ee6121aeebf838aacd2d97ca0c603311589fd690ca openssh-askpass-9.9p1-11.el9_8.tuxcare.els1.i686.rpm 6ae67358581a6b2ebf6bb7349451e429b6413a95cc619e6188449e53293f170b openssh-askpass-9.9p1-11.el9_8.tuxcare.els1.x86_64.rpm eac7c78b51def201713877bde98ebaa0f01d373493f782528bee79251e592a3e openssh-clients-9.9p1-11.el9_8.tuxcare.els1.aarch64.rpm b5e189bd2c45030965ac0a70f99df4a8e83408a5fda278ab5012d8c39f209d34 openssh-clients-9.9p1-11.el9_8.tuxcare.els1.i686.rpm db446ca3f967e338a6483b7de3032bdc8e3c2ded9b76b536993c81f8d54905ab openssh-clients-9.9p1-11.el9_8.tuxcare.els1.x86_64.rpm b5017d04e1ef1463241d1017c9a5eb6300760cb6e63da558c2f10b3a2d81321e openssh-keycat-9.9p1-11.el9_8.tuxcare.els1.aarch64.rpm 9239dec12018de21b4827207f13070483f98d16c3617a19475a01508651304a8 openssh-keycat-9.9p1-11.el9_8.tuxcare.els1.i686.rpm e58f8c90cb41c6b1ee658abd9d94e1ca2a91593aa273b222bd8a42d476cc7955 openssh-keycat-9.9p1-11.el9_8.tuxcare.els1.x86_64.rpm 4131a1ac23e7f075f2953d04a02fb8ac9858cf8c19b29e6b99d7c603a8e0b3e7 openssh-server-9.9p1-11.el9_8.tuxcare.els1.aarch64.rpm bcbc3c381a7c812ac4debb43f4459a92f9e3345b3e82deb5f7df40c4831317bd openssh-server-9.9p1-11.el9_8.tuxcare.els1.i686.rpm 801ae84adb4188dc3f25ad0fdb8b422b72c01b1109bb4b934b6982daba60b0b7 openssh-server-9.9p1-11.el9_8.tuxcare.els1.x86_64.rpm 01a665a13f88d26480bce79510eb4f6f7e28fa165b67657024197676102034bc openssh-sk-dummy-9.9p1-11.el9_8.tuxcare.els1.aarch64.rpm 45cd39eabc6014481c842e82558fdce2558a505c11f481e9d61087fc3901c9f9 openssh-sk-dummy-9.9p1-11.el9_8.tuxcare.els1.i686.rpm 6c0acbfb30e397bd3026a8b4ce5671a821e3158e4502ea407dc12e80ba719e16 openssh-sk-dummy-9.9p1-11.el9_8.tuxcare.els1.x86_64.rpm 13333ae1e20af5c5d15a431d12c20e9b597da8e1117b70b4b07e5d576757bd2d pam_ssh_agent_auth-0.10.4-8.11.el9_8.tuxcare.els1.aarch64.rpm 3b56dadcb142a2f460e603550b59c7a3b0e2e4b6031e52d3ed93ef7b9bfc071b pam_ssh_agent_auth-0.10.4-8.11.el9_8.tuxcare.els1.i686.rpm 07953fa7a22c4d9eb194de3cc97c3f4f4284d068fab33088b3a9a7c971dc71de pam_ssh_agent_auth-0.10.4-8.11.el9_8.tuxcare.els1.x86_64.rpm 6fef8de5a1689a786ad7355012f335fb91d282ab2668d5a61302e6b6b6488e03 CLSA-2026:1790871595 TuxCare License Agreement 0 - CVE-2026-18924: link HTTP/2 server-push transfers to the parent handle's share in duphandle() so the pushed handle does not outlive shared state Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-18924: link HTTP/2 server-push transfers to the parent handle's share in duphandle() so the pushed handle does not outlive shared state

0 tuxcare-almalinux9.8-esu curl-7.76.1-40.el9_8.7.tuxcare.els4.aarch64.rpm 0d43e8ad845cf87c7ca98d232688a5d71b0f1c2c85ee09ce923aff13ee2d2ed1 curl-7.76.1-40.el9_8.7.tuxcare.els4.i686.rpm 1087190818b60783e50c43f86696556d3f995f22951fbcd0a2375bd8bfe5c39d curl-7.76.1-40.el9_8.7.tuxcare.els4.x86_64.rpm e7f8934de0824ad7e20e849d2c1f1e167c1655c29678ab87ddccf5db33c2f85d curl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.aarch64.rpm b00d70aa233c2870197876643fe5c0c9702f00e34cc047f43e016de99c2dc051 curl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.i686.rpm f770ef22590250a678e6663e3d32ca9075df4a560e566b12da756c0829cf67f2 curl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.x86_64.rpm 79a8868121b94358ca75ed897754ec46c1d2353f372a38b9b73be8fd88b94331 libcurl-7.76.1-40.el9_8.7.tuxcare.els4.aarch64.rpm fdadebcfea389c5fbb750a85ce32156054a524207f4880a962cdd93ec8d40ae1 libcurl-7.76.1-40.el9_8.7.tuxcare.els4.i686.rpm e1d1b4ff27469f32ef5893a57dead51c778acf4aef218ead01d85f6ab76cab45 libcurl-7.76.1-40.el9_8.7.tuxcare.els4.x86_64.rpm baf0917be3ec6980017376db3e4fa6ca6f3907e1437b72380457ca434e90f5f9 libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els4.aarch64.rpm 5707bf1b3e90c55dd963a73c79934abc6669560760a385abdf25cfa6f6bdbd91 libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els4.i686.rpm 5a35c812e32e717dbbbeaaf29d1c8ad9c8200748501f2a96330e524db8418a52 libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els4.x86_64.rpm e05cc72afbdf96a9f5d02d635d684d5405e720c48da31f04fd3c44a6c66db943 libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.aarch64.rpm 876b65c974086051e33bc82b15ff6e4ee78363c477aa20d18ab78a352a7e5fab libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.i686.rpm 3b59f3d748667d0f6fa6fa1e675fad77cb4c033b4f2d2181237b45f7c833dc0c libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els4.x86_64.rpm 8d1a9c0cfd8dc0349e524e17824a452a2a004e380d8098d8ba3c9169e9961510 CLSA-2026:1790871873 TuxCare License Agreement 0 - CVE-2026-5773: wrong SMB connection reuse across shares - CVE-2026-8458: stale Negotiate service name on reused connections - CVE-2026-8932: connection reuse ignoring mTLS private key options Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5773: wrong SMB connection reuse across shares - CVE-2026-8458: stale Negotiate service name on reused connections - CVE-2026-8932: connection reuse ignoring mTLS private key options

0 tuxcare-almalinux9.8-esu curl-7.76.1-40.el9_8.7.tuxcare.els3.aarch64.rpm 1344e67e7bab80a0470a508170ee9ac2fd1e9d0554af46741d2eaf1eb5e3c819 curl-7.76.1-40.el9_8.7.tuxcare.els3.i686.rpm 2a96a660db1a35d5a9b121e4fb539df5238d9fd7b73aeeb759280d711288929c curl-7.76.1-40.el9_8.7.tuxcare.els3.x86_64.rpm 835a693a46e21261eaaea41c62113a0a67b1a6826ab9a1cf86b9e36a8e1fb136 curl-minimal-7.76.1-40.el9_8.7.tuxcare.els3.aarch64.rpm 8fc91a8c51c19b35ab68d09b6309a7080f71abee62b5fee562cc23c01fcc0927 curl-minimal-7.76.1-40.el9_8.7.tuxcare.els3.i686.rpm cb1857ca8287425239bbcc0ef9f5272ec3d268814342a029386e6c92e392c031 curl-minimal-7.76.1-40.el9_8.7.tuxcare.els3.x86_64.rpm 99181c40f3d2e6d331827e6b5fb2a475d71709468945d0203579a88c921aa153 libcurl-7.76.1-40.el9_8.7.tuxcare.els3.aarch64.rpm 7c3d6ef57b122c8d453555636965fe49821dc6ed5772806f8117ab2da4eb3f20 libcurl-7.76.1-40.el9_8.7.tuxcare.els3.i686.rpm c271b7b735d7232fc3c6284bf33fcdac427f8c2197c7f6ac72dbf14e6cdc9111 libcurl-7.76.1-40.el9_8.7.tuxcare.els3.x86_64.rpm d0181a6e6bdcd78e365cb085d0e7c87c070027f24ab7d1a9bb920c67aefd4a57 libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els3.aarch64.rpm 711773f0c6345bf6d535222ee2299e89b5e6472a8a140b565dee3b77c20dd029 libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els3.i686.rpm a41cb9408c762a73decd3e4fa40888370ddd680fb1f71e51295747e2d80d812c libcurl-devel-7.76.1-40.el9_8.7.tuxcare.els3.x86_64.rpm 4dc39c1b2fb6bfd5cee4fe4459729c917563b09c3cf33bd4237ee8b6ca9e7605 libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els3.aarch64.rpm fe8a1fb65051f63375214860e83eef5ab49e2fb643ab0a56f4127dd46d54547c libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els3.i686.rpm aa94d10bb746f28e094d0962e9f4890875de9440d2e7a942782bab534d0062a9 libcurl-minimal-7.76.1-40.el9_8.7.tuxcare.els3.x86_64.rpm bd57eaf39859fb4ecf3fa7102755fdd069629f0f659de1ee2b7fb764c8af1e37 CLSA-2026:1790872433 TuxCare License Agreement 0 - CVE-2023-4504: heap buffer over-read in scan_ps() on a trailing backslash Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4504: heap buffer over-read in scan_ps() on a trailing backslash

0 tuxcare-almalinux9.8-esu cups-2.3.3op2-39.el9_8.tuxcare.els1.aarch64.rpm 85f9d7a135dd7633863c60800957aaa4ff87ad05635ec2d97c8dc872dfeae1f1 cups-2.3.3op2-39.el9_8.tuxcare.els1.i686.rpm eb7d8b954c6d23cf35e225a897708f467f5f6b45b8ef57911af4a34876a33491 cups-2.3.3op2-39.el9_8.tuxcare.els1.x86_64.rpm 37627bd4fa0b68190f884c9345844c7853bc28de3417cefb13d691f3018e643c cups-client-2.3.3op2-39.el9_8.tuxcare.els1.aarch64.rpm fd30d025e606b8fe5adfce328190c67492fb132061a6c3e508a962ec3a6a367d cups-client-2.3.3op2-39.el9_8.tuxcare.els1.i686.rpm 3834adc75626373d8c259884cd2000d015bac65adc9ab6d34695b3b49c6d1db1 cups-client-2.3.3op2-39.el9_8.tuxcare.els1.x86_64.rpm e05e4111f4d025a3b35508d47f24beb45595a59287bd6a8558b1e398292c20bd cups-devel-2.3.3op2-39.el9_8.tuxcare.els1.aarch64.rpm d683679a70ef815f1369caee5dc91e3d40a8899b7d44168f268c3ebc8aa19493 cups-devel-2.3.3op2-39.el9_8.tuxcare.els1.i686.rpm f3634805faccd94f15badb9856a285039ca7cf53289823057b464c3b487641b6 cups-devel-2.3.3op2-39.el9_8.tuxcare.els1.x86_64.rpm c6d3f30d4c89bfe947ea141b12cb147478cc34524fc4f805760bb007962fb693 cups-filesystem-2.3.3op2-39.el9_8.tuxcare.els1.noarch.rpm 714ab4abffe6fa4ff30d5a07efe6a9aead9a7070320a8763a8248afaed901c3a cups-ipptool-2.3.3op2-39.el9_8.tuxcare.els1.aarch64.rpm 48b4123b6ab32c31ba701526eb5fc2f468627f708ab7a222b684fadccef01111 cups-ipptool-2.3.3op2-39.el9_8.tuxcare.els1.i686.rpm 69512ce198b914e47a6df9db0664521f210a929c7716993e4efc672f1066960e cups-ipptool-2.3.3op2-39.el9_8.tuxcare.els1.x86_64.rpm 2ae6f842fb468bc05830a18ad792ec95bfe4fe0641bf771159659c2a9bad60f7 cups-libs-2.3.3op2-39.el9_8.tuxcare.els1.aarch64.rpm f0b1332718f7ee37eacf0c8a85aeaa8d425e68225b0a5097c201fb0a4fe52cbb cups-libs-2.3.3op2-39.el9_8.tuxcare.els1.i686.rpm d273361607784d63c5d2e632636527b5b2952242f0ebc5ebbb8e9934f486dbe9 cups-libs-2.3.3op2-39.el9_8.tuxcare.els1.x86_64.rpm 041d16c6696fadabe37abab6a2c05b3d695f9110a5f7878e9958846c50a81c8d cups-lpd-2.3.3op2-39.el9_8.tuxcare.els1.aarch64.rpm fd69aa82b05eabeb3ad7c912e4cb9df6045265eb8f1ea4d24829b290c20dfb3b cups-lpd-2.3.3op2-39.el9_8.tuxcare.els1.i686.rpm 476138ee20d97da5af09afe02b645f40806ec0f862cd440f33f50ddb02b82d21 cups-lpd-2.3.3op2-39.el9_8.tuxcare.els1.x86_64.rpm 99a3d484728bc50d86d3c9b0a6159966eeccac4beda64236b5ef8933c7c35875 cups-printerapp-2.3.3op2-39.el9_8.tuxcare.els1.aarch64.rpm b816b0402e31999bd9e72d3b29791e86fef3511c98312e0aff66b1594f8bcc93 cups-printerapp-2.3.3op2-39.el9_8.tuxcare.els1.i686.rpm 31cb1f4df16633d7b2d7680aa3692f5b063bc3bfd44b8f1079594bf6e0d4f603 cups-printerapp-2.3.3op2-39.el9_8.tuxcare.els1.x86_64.rpm 23324b82f80c249ca79147f2dd5238c872a0d3f06e9ee83d9f6b2b15367969c9 CLSA-2026:1790873796 TuxCare License Agreement 0 - CVE-2026-40528: buffer overflow in do_key_value() on long profile key values Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40528: buffer overflow in do_key_value() on long profile key values

0 tuxcare-almalinux9.8-esu opensc-0.23.0-6.el9.tuxcare.els1.aarch64.rpm 87bf96fbf474ce58ab9fa00d0e7ba3d8ced5de3372c5522e4e5da6f338beedf7 opensc-0.23.0-6.el9.tuxcare.els1.i686.rpm f113fc6d8393cc88fb719091dc7c3268b2b7e68c4074c8ffa8c2df8f0f48c6bf opensc-0.23.0-6.el9.tuxcare.els1.x86_64.rpm e436b466632d53af315d6540ad14bbb0171beb6694aedff94415fc4bfc9aef70 CLSA-2026:1790874277 TuxCare License Agreement 0 - CVE-2026-50292: udev property injection via phys in libinput-device-group Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50292: udev property injection via phys in libinput-device-group

0 tuxcare-almalinux9.8-esu libinput-1.19.3-8.el9_7.tuxcare.els1.aarch64.rpm 7bea9ddf25b5da8dd3dcbc2051c6ddcaca8e69df71a5d0537bb6413871eff7ff libinput-1.19.3-8.el9_7.tuxcare.els1.i686.rpm 77658f368a05bd6207385d8e6c0674531e25760a1ec36c853efd1732c863a2a2 libinput-1.19.3-8.el9_7.tuxcare.els1.x86_64.rpm 636f52d8f350284c71a1abc98197bf3716a260cacd5d05e236603d33e59d0a83 libinput-devel-1.19.3-8.el9_7.tuxcare.els1.aarch64.rpm ab3b451d1d142a49c86eb97353f9aeb46f0f14ce2a5dc3a759e55faab95f8476 libinput-devel-1.19.3-8.el9_7.tuxcare.els1.i686.rpm 5f4843e8f90c075db934760bd2edc53d900b9269763b96d545beedd339bc0d5d libinput-devel-1.19.3-8.el9_7.tuxcare.els1.x86_64.rpm e02e6ff77aa8714de305aa7ad43b676a2b652b7c6ca4ad966fba5b6ce59cc1f5 libinput-test-1.19.3-8.el9_7.tuxcare.els1.aarch64.rpm 30606344b354298ba24b6ebd1ba5e579c8430363a17a4489baa2919e1ce0c7be libinput-test-1.19.3-8.el9_7.tuxcare.els1.i686.rpm cd4c6605f946ee5fa3965505621bf4be6c866ee94efc0703ea59175092288d99 libinput-test-1.19.3-8.el9_7.tuxcare.els1.x86_64.rpm 9dd380b27698a9b55c746d7dc4b870bc3669d13c21a55703d6d504125b1ecaaa libinput-utils-1.19.3-8.el9_7.tuxcare.els1.aarch64.rpm aa1022ece186b85205db58620fd3b88bd6e86724326212c9a0d2c838025d4a3f libinput-utils-1.19.3-8.el9_7.tuxcare.els1.i686.rpm 7572cfea236c26676ceb2df12cd69956a24523f759888c00c078d641cfd9b827 libinput-utils-1.19.3-8.el9_7.tuxcare.els1.x86_64.rpm 9d2d4e2940684a309cd790441d239e62218bd95818dd004d25502b5c34179d2c CLSA-2026:1790876807 TuxCare License Agreement 0 - CVE-2026-72712: infinite loop in Packet:parse_options() on zero-length option Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-72712: infinite loop in Packet:parse_options() on zero-length option

0 tuxcare-almalinux9.8-esu nmap-7.92-5.el9.tuxcare.els1.aarch64.rpm e198c76b6381f90db6db0c43e073223e5527be78ecb219b49afa9a978abf7c64 nmap-7.92-5.el9.tuxcare.els1.i686.rpm b97ff4a6c91ffc855b278c2e87292eed57a211d05c8cbe7f85668a104138c2ae nmap-7.92-5.el9.tuxcare.els1.x86_64.rpm a582e482618bd46da0a63f3bfda6338154ff42b9c5c072a2fc7f893eaf08d5c3 nmap-ncat-7.92-5.el9.tuxcare.els1.aarch64.rpm a88956ab7bcbe72a020cd190b05c77803fe5d234a566c2a26cf523bc8ed23ddc nmap-ncat-7.92-5.el9.tuxcare.els1.i686.rpm 7424ccba08564dc2ec8110a3e60d50cd7bb95c08d0337e860cc78365fb7984db nmap-ncat-7.92-5.el9.tuxcare.els1.x86_64.rpm 07e69b2af9446b935d5a77f9f3bfd03b3f2c94e85a590a4617f6154b56b8668b CLSA-2026:1790932709 TuxCare License Agreement 0 - Add Alma9_8ESU; carry the tuxcare9.6esu CVE fixes - CVE-2024-49394: protect In-Reply-To and References under the cryptographic signature (add to protected headers) - CVE-2024-49395: fix missing display of encryption recipients in GPGME - CVE-2026-43859: use memcpy() instead of strfcpy() in hmac_md5() so a binary MD5 digest of an over-long IMAP CRAM-MD5 secret is not truncated at an embedded NUL - CVE-2026-43860: copy the full MD5_DIGEST_LEN bytes of the hashed IMAP CRAM-MD5 secret in hmac_md5() instead of one byte less - CVE-2026-43861: reject a percent-encoded NUL (%00) as an invalid character in url_pct_decode() - CVE-2026-43862: check that the GSSAPI security-level token is at least 4 bytes before reading it in imap_auth_gss(), and read it as uint32_t - CVE-2026-43863: treat a negative gpgme_data_read() return as an error in data_object_to_stream() instead of looping forever - CVE-2026-43864: check key and key->subkeys for NULL in show_sig_summary() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Add Alma9_8ESU; carry the tuxcare9.6esu CVE fixes - CVE-2024-49394: protect In-Reply-To and References under the cryptographic signature (add to protected headers) - CVE-2024-49395: fix missing display of encryption recipients in GPGME - CVE-2026-43859: use memcpy() instead of strfcpy() in hmac_md5() so a binary MD5 digest of an over-long IMAP CRAM-MD5 secret is not truncated at an embedded NUL - CVE-2026-43860: copy the full MD5_DIGEST_LEN bytes of the hashed IMAP CRAM-MD5 secret in hmac_md5() instead of one byte less - CVE-2026-43861: reject a percent-encoded NUL (%00) as an invalid character in url_pct_decode() - CVE-2026-43862: check that the GSSAPI security-level token is at least 4 bytes before reading it in imap_auth_gss(), and read it as uint32_t - CVE-2026-43863: treat a negative gpgme_data_read() return as an error in data_object_to_stream() instead of looping forever - CVE-2026-43864: check key and key->subkeys for NULL in show_sig_summary()

0 tuxcare-almalinux9.8-esu mutt-2.2.6-2.el9.tuxcare.els4.aarch64.rpm 3e7165aecedf6d5bd56ee0364aae0bdfadbf6ad5a64a25f6257915c63938cef9 mutt-2.2.6-2.el9.tuxcare.els4.i686.rpm 415e1db058598419a313c334c9d1da3a4d4dd65d6a3616926276e053406a9881 mutt-2.2.6-2.el9.tuxcare.els4.x86_64.rpm 486b5c5215580b4fc1de6cc25b678d76f9dc50ab71342610ea77c787fac075c2 CLSA-2026:1790933091 TuxCare License Agreement 0 - Rebase to 5.1.0-6.el9_8.1; vendor Patch005/006 carry the upstream fixes for CVE-2026-40468 and CVE-2026-40469 (our patches dropped) - CVE-2023-4156: fix heap out-of-bounds read in format_tree() in builtin.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase to 5.1.0-6.el9_8.1; vendor Patch005/006 carry the upstream fixes for CVE-2026-40468 and CVE-2026-40469 (our patches dropped) - CVE-2023-4156: fix heap out-of-bounds read in format_tree() in builtin.c

0 tuxcare-almalinux9.8-esu gawk-5.1.0-6.el9_8.1.tuxcare.els1.aarch64.rpm 1f137f618f4e0da4a219d33351dfe6ab929f8d928bee4a825d05ce1f01d22db0 gawk-5.1.0-6.el9_8.1.tuxcare.els1.i686.rpm a4a7cb83d611771212b13a990376f18fcacdf9a9fc6aeabb5975f93a857bdb47 gawk-5.1.0-6.el9_8.1.tuxcare.els1.x86_64.rpm 91fcc9c3940feba9d323eaf15cd7a878ee73d29639809eb4d268bafa7da849df gawk-all-langpacks-5.1.0-6.el9_8.1.tuxcare.els1.aarch64.rpm abb9c5bf948e9173c6dc21ad462dd9b5952f1f3c2384aa27a82dc00ed623576c gawk-all-langpacks-5.1.0-6.el9_8.1.tuxcare.els1.i686.rpm 9c0958ddae98c642b6e8c81c78a39dcb49b6a0e5227eaabfe083d41e650e01fc gawk-all-langpacks-5.1.0-6.el9_8.1.tuxcare.els1.x86_64.rpm edaf99fecfc44fd32c01b1186067b30686cf97b8679ede864693b49129a4a95b gawk-devel-5.1.0-6.el9_8.1.tuxcare.els1.aarch64.rpm d7c9999d86bb05ecbbd1eb9442d91238ea659f9578edb836ed5b9db27497596a gawk-devel-5.1.0-6.el9_8.1.tuxcare.els1.i686.rpm c1fc6936e2a2488254bf14ed40fd12182fa90a21bbfae87715f239ae26675876 gawk-devel-5.1.0-6.el9_8.1.tuxcare.els1.x86_64.rpm e58e30d5305273538f7c056006d84049964277ea81888efac9af13980844c49b gawk-doc-5.1.0-6.el9_8.1.tuxcare.els1.noarch.rpm 2e7ef48b9906144c3880c191cad7a87bd521202c0fe9a2a35c50265894428360 CLSA-2026:1790873582 TuxCare License Agreement 0 - CVE-2023-51257: out-of-bounds write in jas_icctxt_input() - CVE-2025-8836: reachable assertion in jpc_floorlog2() via cp_create() - CVE-2025-8837: use-after-free in jpc_dec_dump() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-51257: out-of-bounds write in jas_icctxt_input() - CVE-2025-8836: reachable assertion in jpc_floorlog2() via cp_create() - CVE-2025-8837: use-after-free in jpc_dec_dump()

0 tuxcare-almalinux9.8-esu jasper-2.0.28-4.el9.tuxcare.els1.aarch64.rpm 7889707487a66e0ba7f31ed110d480b143fea46d18709d5164eb24ff0ea384b2 jasper-2.0.28-4.el9.tuxcare.els1.i686.rpm c84b3f8db2fc672cf90311e003a817814e088a4af9626db79232809d58bdee7b jasper-2.0.28-4.el9.tuxcare.els1.x86_64.rpm ec3dfa3da10aca64aba16e41374f27caef0fc76e8fd6dc55773cd19f32b075a0 jasper-devel-2.0.28-4.el9.tuxcare.els1.aarch64.rpm f5445074ada7cbd51af7e5564e89fe2af1289b7fdf587d0d096e60047e5aa5cc jasper-devel-2.0.28-4.el9.tuxcare.els1.i686.rpm e729908befefbf71d1156a9137cb45afdde6886a7d03967fdfea62b19568f68b jasper-devel-2.0.28-4.el9.tuxcare.els1.x86_64.rpm dc10d21cd8582efccbf8dcbb8a05e3045222149beac62ff961eb7ff83fe220f4 jasper-libs-2.0.28-4.el9.tuxcare.els1.aarch64.rpm 47ce906ce7bee89bee7da70607e82ba1a41dcff72cfd049554c3882783c24e5b jasper-libs-2.0.28-4.el9.tuxcare.els1.i686.rpm fae613dfcfe55b9cfbb867254090b554a6790fad1f23179097d4b0925cd4448c jasper-libs-2.0.28-4.el9.tuxcare.els1.x86_64.rpm 6565da764fa5f9626a9c7205a2795df3f74f3906b0d626c14b6ef3617c6795fb jasper-utils-2.0.28-4.el9.tuxcare.els1.aarch64.rpm 62992a7945861166e4c1beb6b93e0a908b4054948acc6cc562e6183a8a6921b6 jasper-utils-2.0.28-4.el9.tuxcare.els1.i686.rpm 8cfe2421f2dee8b6901aa4c260a3859e77183361a100d880eac151798557aa3a jasper-utils-2.0.28-4.el9.tuxcare.els1.x86_64.rpm e60bb3f4ee600d95cf083f4b7a3d7136c71e16a6b732028b2e57703a52f84421 CLSA-2026:1790962046 TuxCare License Agreement 0 - CVE-2025-10921: fix HDR file parsing heap-based buffer overflow vulnerability; bound linesize by the size of one scanline and correct the run length check added for CVE-2026-2050 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-10921: fix HDR file parsing heap-based buffer overflow vulnerability; bound linesize by the size of one scanline and correct the run length check added for CVE-2026-2050

0 tuxcare-almalinux9.8-esu gegl04-0.4.62-1.el9_8.2.tuxcare.els1.aarch64.rpm 1b998da1095da9cf5a2a97d11b7adb83e4549be27ceaf1f6184bc2252527a614 gegl04-0.4.62-1.el9_8.2.tuxcare.els1.i686.rpm 458f9f3168ce052bc967180074c1db5207634112a22c9b233a809b9e9e5ade02 gegl04-0.4.62-1.el9_8.2.tuxcare.els1.x86_64.rpm 3cc51cab31bff128f50943d7a5f7d5384d1f029648cf84005526c08792490264 gegl04-devel-0.4.62-1.el9_8.2.tuxcare.els1.aarch64.rpm 79b6c6ff0854e10243bc477719f4b9e9ce1d707e6aefe222fc8403ba6a340e54 gegl04-devel-0.4.62-1.el9_8.2.tuxcare.els1.i686.rpm ef2b7398987d7c0fbd072d8a22956b08ea57d86e4a6f41ff4e49e150d750e4bc gegl04-devel-0.4.62-1.el9_8.2.tuxcare.els1.x86_64.rpm b560e3e4e8b517baec60adb679800a69939eb72d7ed584662b09978f319457f7 gegl04-devel-docs-0.4.62-1.el9_8.2.tuxcare.els1.aarch64.rpm 8adaecdbc02ef38f42bcf9781ead9d44fa2c431c3c127069d1a8571b9ffee347 gegl04-devel-docs-0.4.62-1.el9_8.2.tuxcare.els1.i686.rpm 816ad2a6521029591265544657804eaf24e7a9b5f962e93230b2e66d0a5aa43b gegl04-devel-docs-0.4.62-1.el9_8.2.tuxcare.els1.x86_64.rpm 408700b930d1190f3c38ad7c77254c5f77fda3a55730681d647c2577b89e4ad6 gegl04-tools-0.4.62-1.el9_8.2.tuxcare.els1.aarch64.rpm aa3a84b06bf7b1263628fe4b663131cb6283f368542adeb11f5c06bb14e45c53 gegl04-tools-0.4.62-1.el9_8.2.tuxcare.els1.i686.rpm 8866f024143b155675ec6afc2f5b72769d13fe73c0f625b9e9ce6e255b155de1 gegl04-tools-0.4.62-1.el9_8.2.tuxcare.els1.x86_64.rpm d896b69d8fa8ebbc821e1ffa3a1cfd0ebb193af02669a732778e7b6684f2b6c7 CLSA-2026:1790972870 TuxCare License Agreement 0 - CVE-2026-14199: auth proxy cache key collision in getProxyCacheKey() - Stop exporting GOEXPERIMENT=boringcrypto: golang 1.26.7-2.el9_8 defaults to GOFIPS140=certified and refuses the experiment Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-14199: auth proxy cache key collision in getProxyCacheKey() - Stop exporting GOEXPERIMENT=boringcrypto: golang 1.26.7-2.el9_8 defaults to GOFIPS140=certified and refuses the experiment

0 tuxcare-almalinux9.8-esu grafana-10.2.6-23.el9_8.3.tuxcare.els1.aarch64.rpm 01424e7deb51781c1a148bc0af18e5febcd7b74b89534be1e7cf9ebb313caf59 grafana-10.2.6-23.el9_8.3.tuxcare.els1.x86_64.rpm 20783034da359824856ca2cfc9d19bd88e26e9354c25170e4e1849297730ceb9 grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els1.aarch64.rpm 1999a03084e481efc096b77c7ae9b3762e3f8cea52492d896991c583a491a252 grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els1.x86_64.rpm 7660664d832cbbcbc172ddd7331dec8a97fc159ff0044619526dfcbcfde3b0a6 CLSA-2026:1790973101 TuxCare License Agreement 0 - CVE-2025-12495, CVE-2025-12839, CVE-2025-12840: heap buffer overflows in OpenEXRCore chunk reading (memset on a failed read in exr_read_chunk(), packed/unpacked size mismatch of uncompressed tiles, tiled chunk sizes for scanline parts in internal_exr_compute_chunk_offset_size()) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-12495, CVE-2025-12839, CVE-2025-12840: heap buffer overflows in OpenEXRCore chunk reading (memset on a failed read in exr_read_chunk(), packed/unpacked size mismatch of uncompressed tiles, tiled chunk sizes for scanline parts in internal_exr_compute_chunk_offset_size())

0 tuxcare-almalinux9.8-esu openexr-3.1.1-3.el9_8.4.tuxcare.els2.aarch64.rpm 72e033c140faa14eeb8e00cf3c60eeb9f9a4ec6d3644ea844a1a332ca8cfb345 openexr-3.1.1-3.el9_8.4.tuxcare.els2.i686.rpm b850cf5f7ec9c8aa3cbc6c01eeb626b06afcd4a5e3a096cc4168a2671c4595f0 openexr-3.1.1-3.el9_8.4.tuxcare.els2.x86_64.rpm fa43dd95040e16e48110f9c606bd7b15c840a04aa59478517a54ed29e0a972e0 openexr-devel-3.1.1-3.el9_8.4.tuxcare.els2.aarch64.rpm 89d5fd15cf2f20a2c0173bc89bc603d277bd2f12dbd4454ed8c5c0032fd34fc6 openexr-devel-3.1.1-3.el9_8.4.tuxcare.els2.i686.rpm 630b33b253c4b603ead825a8dc602d0c36f37a29965cf9e0ba5250821b75fdf2 openexr-devel-3.1.1-3.el9_8.4.tuxcare.els2.x86_64.rpm 5ea6e5853b3eac31e3901cc66f8b1c0abac47debd468715c26dd3266faaf86e8 openexr-libs-3.1.1-3.el9_8.4.tuxcare.els2.aarch64.rpm 02c2301d4f04afbf0b1d2b0b396dc780bc8c54a4f7d04bcf703818b91da717d9 openexr-libs-3.1.1-3.el9_8.4.tuxcare.els2.i686.rpm 9f13fa720209877ce8f66424667e86dd59418dc2a9531811b6e57edb04b37d10 openexr-libs-3.1.1-3.el9_8.4.tuxcare.els2.x86_64.rpm 90fa9f4f116e6dcbd0120b1ec626aba6693dca4095d842e69a6cdfc8f2cd5b15 CLSA-2026:1791175484 TuxCare License Agreement 0 - CVE-2026-42960: in scrub_normalize(), mark additional-section glue as allowed only for NS rrsets in the authority section, so address records can no longer be cached as a side effect of a delegation response - CVE-2026-80225: bound the number of pipelined queries drained from one TCP/DoT connection per event-loop visit to NUM_TCP_PER_SELECT and defer the remainder through a zero-delay timer, so a single connection can no longer monopolise a worker event loop - CVE-2026-85501: add the val-validation-attempts and val-hash-attempts limits (default 32 each) to bound DNSSEC signature and hash work per validation, and require only the answer and authority sections to be secure (reply_an_ns_rrsets_secure), so the additional section is no longer validated Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42960: in scrub_normalize(), mark additional-section glue as allowed only for NS rrsets in the authority section, so address records can no longer be cached as a side effect of a delegation response - CVE-2026-80225: bound the number of pipelined queries drained from one TCP/DoT connection per event-loop visit to NUM_TCP_PER_SELECT and defer the remainder through a zero-delay timer, so a single connection can no longer monopolise a worker event loop - CVE-2026-85501: add the val-validation-attempts and val-hash-attempts limits (default 32 each) to bound DNSSEC signature and hash work per validation, and require only the answer and authority sections to be secure (reply_an_ns_rrsets_secure), so the additional section is no longer validated

0 tuxcare-almalinux9.8-esu python3-unbound-1.24.2-3.el9_8.8.tuxcare.els1.aarch64.rpm db74922dc12c14d43b196ff730597f40466ff8310401c21a32031d7d6e84d9f9 python3-unbound-1.24.2-3.el9_8.8.tuxcare.els1.i686.rpm 6402923b60baac045d8419641e396988638dfb41d5c49e7b688b59f1236bd203 python3-unbound-1.24.2-3.el9_8.8.tuxcare.els1.x86_64.rpm 3e54e1323952d9b7b0c471dc4f893fb48fe89da31ad142fad61001707736c79c unbound-1.24.2-3.el9_8.8.tuxcare.els1.aarch64.rpm eb128310cf3ecadd6abb859a90b3cf71ab32076c9c1ba63d0c4d7ec5145bf889 unbound-1.24.2-3.el9_8.8.tuxcare.els1.i686.rpm df56321a33bd25514d829cde06a1016c3f6f1980c8d2b4d77baaa4ba4a728628 unbound-1.24.2-3.el9_8.8.tuxcare.els1.x86_64.rpm a1c20fb272cf0a76d3ca9a4dbfa284a9108e70c2971931722f5775487580f5d0 unbound-devel-1.24.2-3.el9_8.8.tuxcare.els1.aarch64.rpm 4a08b08db817a71367afd075fc8de371eb474502f8c8ac76afbf38896ef60ad3 unbound-devel-1.24.2-3.el9_8.8.tuxcare.els1.i686.rpm f182d88e7b0394f486075da4483ca2eb66655f9f3e79e84a8578d76cbbddc1ea unbound-devel-1.24.2-3.el9_8.8.tuxcare.els1.x86_64.rpm 9e284acece41d81b49f42690ae82dcb81272f894d5e727c5a402f7978ff1c592 unbound-dracut-1.24.2-3.el9_8.8.tuxcare.els1.aarch64.rpm affb2bab47bde92dbd5b4fc78466ccb9d2509da6a5cc921707aac015da21aacd unbound-dracut-1.24.2-3.el9_8.8.tuxcare.els1.i686.rpm daf36772a42d3ce60f812e0eaff8289ebbee050fcfedfcf463e7f6ce69113e29 unbound-dracut-1.24.2-3.el9_8.8.tuxcare.els1.x86_64.rpm bf6689c7c1c76d909a757562ec48068a5c70d1e2163c87678b6f098dc77e563e unbound-libs-1.24.2-3.el9_8.8.tuxcare.els1.aarch64.rpm d6d72d7fd5d15e482642e5b528a2a32dc41ecc775855311ca7e2195421118e15 unbound-libs-1.24.2-3.el9_8.8.tuxcare.els1.i686.rpm 3a59eaae02385412bf6e6ce2b7737d7f8a2c24ae2d632edda5d2126544333dae unbound-libs-1.24.2-3.el9_8.8.tuxcare.els1.x86_64.rpm fa01fa9005e4a9558ff0c3a4ae28cc365ddf6db911960e1c358ea0ef05e35653 CLSA-2026:1790931787 TuxCare License Agreement 0 - CVE-2026-25210: add an integer overflow check before the tag buffer doubling in doContent(), so the reallocation size can no longer wrap - CVE-2026-56407: cap the entity value pool length against signed integer overflow in doProlog() before it is stored into m_declEntity->textLen - CVE-2026-56408: add the upstream integer overflow guard to copyString(); with XML_Char == char as built here the guard is inert, and it takes effect only in an XML_UNICODE build where sizeof(XML_Char) > 1 Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-25210: add an integer overflow check before the tag buffer doubling in doContent(), so the reallocation size can no longer wrap - CVE-2026-56407: cap the entity value pool length against signed integer overflow in doProlog() before it is stored into m_declEntity->textLen - CVE-2026-56408: add the upstream integer overflow guard to copyString(); with XML_Char == char as built here the guard is inert, and it takes effect only in an XML_UNICODE build where sizeof(XML_Char) > 1

0 tuxcare-almalinux9.8-esu expat-2.5.0-6.el9_8.5.tuxcare.els1.aarch64.rpm d9c5eb159e07df9d9bb43384a4205f81586a00e8de11324c48b62cfeae647a83 expat-2.5.0-6.el9_8.5.tuxcare.els1.i686.rpm 6c48fcea5d901c9f3643c81681cb8893890b58fd4aec8798e08596f7fb6e25ec expat-2.5.0-6.el9_8.5.tuxcare.els1.x86_64.rpm 24bd4f4ca43b22db0d7e49c8cf0390b549fbbb38e75194ca1eeb02b8d409651c expat-devel-2.5.0-6.el9_8.5.tuxcare.els1.aarch64.rpm 043a51058684ed7c8399646b5d2067b029457824ca77b8b05905e7b13fe025f7 expat-devel-2.5.0-6.el9_8.5.tuxcare.els1.i686.rpm 1a2c8fe9545c7de946ed119e8a4f3a6bdb8f39212644e91b37393172c0fbadca expat-devel-2.5.0-6.el9_8.5.tuxcare.els1.x86_64.rpm 77bd449e0a1037f2f07600e13552ebf2495db31ff0d69055f86eb29702e6fa5a expat-static-2.5.0-6.el9_8.5.tuxcare.els1.aarch64.rpm 2a374918a2dc19297f0a2253f756b29f69789c7a26cb4dacc043b3385f968522 expat-static-2.5.0-6.el9_8.5.tuxcare.els1.i686.rpm 8d3de8531dff22fa7e6b13d00edeeb771ef1dd89722af1f37f4544177c344ff0 expat-static-2.5.0-6.el9_8.5.tuxcare.els1.x86_64.rpm 3f3c2f98b41e8d51042506a9bf86794130f1effe0778cc5e378cbef1bbaf8277 CLSA-2026:1791240407 TuxCare License Agreement 0 - CVE-2026-54679: integer overflow in jvp_string_append() on 32-bit Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-54679: integer overflow in jvp_string_append() on 32-bit

0 tuxcare-almalinux9.8-esu jq-1.6-19.el9_8.2.tuxcare.els2.aarch64.rpm b22a371d4718aaa246bf101f47779affdef273a8dc33c42895a2493f26760559 jq-1.6-19.el9_8.2.tuxcare.els2.i686.rpm 9323a7fee65a00f890e2048f071569205a889dad37a73366bce175560085e332 jq-1.6-19.el9_8.2.tuxcare.els2.x86_64.rpm 9210276d5cbc76fdef2c2440b9cd2aac41541878a222ccb2a565ec693dedb958 jq-devel-1.6-19.el9_8.2.tuxcare.els2.aarch64.rpm a9f6563d764fe9e5ff4284e747d60eaa6bba3449af74b29b9f4b3d636dc58428 jq-devel-1.6-19.el9_8.2.tuxcare.els2.i686.rpm c3ca27a88698f82199986dea13b75cc77c8689304782d0d97db74ad4ea2c7387 jq-devel-1.6-19.el9_8.2.tuxcare.els2.x86_64.rpm 64fa25a0c5aeb2729c68552775f4495906647e54412987764d6dbccc29b2fb6d CLSA-2026:1791272489 TuxCare License Agreement 0 - CVE-2026-18147: remove the redirect from the Web UI password reset page Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-18147: remove the redirect from the Web UI password reset page

0 tuxcare-almalinux9.8-esu ipa-client-4.13.4-1.el9_8.tuxcare.els1.aarch64.rpm 04e984458ccbc89db588d15ac81c30b916deceb2b20920628b3d2d266a802a09 ipa-client-4.13.4-1.el9_8.tuxcare.els1.i686.rpm f87ef721b2f9038860657c8a99c04c74e9ed06884e3ad311f50f2747a74d6c99 ipa-client-4.13.4-1.el9_8.tuxcare.els1.x86_64.rpm 54fda904a4fb7b7ef48af530b3055126113ce1b1e65b6eae80925f413ae1953b ipa-client-common-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm 5930a92218675865c20aa7c942c0a4f552a4dd75bc6b16dae051536b8b0a293d ipa-client-encrypted-dns-4.13.4-1.el9_8.tuxcare.els1.aarch64.rpm 269ed95aede92cb02d6e4868e02787db7b2c542157832a5c1a76b98bc303d14f ipa-client-encrypted-dns-4.13.4-1.el9_8.tuxcare.els1.i686.rpm 02a7b89fe2052a14f8e6d782162b4b7234c5f310e855874c47a7286460a12499 ipa-client-encrypted-dns-4.13.4-1.el9_8.tuxcare.els1.x86_64.rpm a32abb17ac7a835003849b26ceb23d98bb375a0c7321413aab52af9350278a3a ipa-client-epn-4.13.4-1.el9_8.tuxcare.els1.aarch64.rpm 43c5938f096ef53a0d631ed5af3a2c7a6894f47fda948e6e13fbbe919c9df8f9 ipa-client-epn-4.13.4-1.el9_8.tuxcare.els1.i686.rpm a624e7200098f7838959a18a0b73ba1b87f6d9a6c8edb4f843ed1b1dfabad519 ipa-client-epn-4.13.4-1.el9_8.tuxcare.els1.x86_64.rpm efbd7277af51c182a7eeee066e79fae51d0aa11d68680595a81375414584fcfd ipa-client-samba-4.13.4-1.el9_8.tuxcare.els1.aarch64.rpm a01baadf9bb92829fe74ae608dcfa9015132d916c9a59c01bc161faa61bdd3d1 ipa-client-samba-4.13.4-1.el9_8.tuxcare.els1.i686.rpm e5d6201d14e5164c40f09189a56e358fa9fdb557f841e56b2d3554b5b4f5bb73 ipa-client-samba-4.13.4-1.el9_8.tuxcare.els1.x86_64.rpm 5e4d1bdb3690d347c09cff266fcf49a2e0e03e492010bb9d419532b51898eb0e ipa-common-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm 2eaa0192b07430dec6d02fb607191c9cee9c2d77df30df7985d4c8beb19234fd ipa-python-compat-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm c60ee13ba50f4b5ee6bc98361fc82801d1a3c20439f42fc13d51edbb09b1ce93 ipa-selinux-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm b21910e2cbcded4f089d6c67535361c2f77ace15d3450421b8a34a4c50aba9b8 ipa-selinux-luna-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm 1e2d6029137508d3eeff2249b114140b3935c776166293821f2976cc66ab1c6c ipa-selinux-nfast-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm 13242ea9f4aa49912e3fe6e265b9d78d795ff97be5221b3606569ba2eb90deb0 ipa-server-4.13.4-1.el9_8.tuxcare.els1.aarch64.rpm 41764b3147f39cf25d67f37153a2687a06f0c8e9475547445e18441fba2332ee ipa-server-4.13.4-1.el9_8.tuxcare.els1.x86_64.rpm c30c07921637489865e3e5e4a479844520d945a30c6fee9e207b6389d444fad5 ipa-server-common-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm 009f40553a82b275072486df1e4a69df26f5e35d25fa71d0b3f96c3c1e7ad3c7 ipa-server-dns-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm c2c272c1ce30d9e0a9d5d55ac12306dda25cd7f1aa6aa4b6d68848251505f900 ipa-server-encrypted-dns-4.13.4-1.el9_8.tuxcare.els1.aarch64.rpm 6ecb4e7ef2216d5e9ba6fa7c07ec3278a6b4fbfe82136257a362e010f26d5429 ipa-server-encrypted-dns-4.13.4-1.el9_8.tuxcare.els1.x86_64.rpm 0ec14e27dfeee28de504da5f81694b98e6a5f7accd096692427203426a275cf8 ipa-server-trust-ad-4.13.4-1.el9_8.tuxcare.els1.aarch64.rpm 43cdc707c9e140777f5a7fccc1358e98c4b9b04458c50664de369c8383954a2a ipa-server-trust-ad-4.13.4-1.el9_8.tuxcare.els1.x86_64.rpm 86263cb09e2fd9205a3bf3aaf04816ff43284ca8a317145a2c972f39e9ee85a3 python3-ipaclient-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm f3f126349020114ec6c92ef5e29b2d87223f82e05766c14892e1f15d89ce55f6 python3-ipalib-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm 80981681b9d50d7ea058a55b2eb6182fb4a9bd25bcbe41675c5130d81bce4469 python3-ipaserver-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm de8e112b844c32b27b606cc52b4608db54b358fc6e988af66c0f2987a00fe4ba python3-ipatests-4.13.4-1.el9_8.tuxcare.els1.noarch.rpm 66cea7a9e5a04fc6ded3b4d6651b16d108574b6c5ed68a699009d2d9de3b30c7 CLSA-2026:1791282070 TuxCare License Agreement 0 - CVE-2025-27144: count the separators before splitting compact JWS/JWE input in the vendored go-jose/v3 so tokens with many dots no longer cause unbounded allocation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-27144: count the separators before splitting compact JWS/JWE input in the vendored go-jose/v3 so tokens with many dots no longer cause unbounded allocation

0 tuxcare-almalinux9.8-esu grafana-10.2.6-23.el9_8.3.tuxcare.els2.aarch64.rpm 6ad8025d386b19c4d55ffffa579451f6003122fc1dd82e2ff4afe8296965858f grafana-10.2.6-23.el9_8.3.tuxcare.els2.x86_64.rpm f99b436d881935eda6919af2b9cab3bf35f610fd7804770a0c151a1c3375aca0 grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els2.aarch64.rpm 41356f6ab5159207acc2dec3d5cea4daaaa2c87d3ba967051b46cc86ed998f3b grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els2.x86_64.rpm b0415d98c0caf007a2c3d8a5941ae89b56907c8f8d59990b0e8c093bf7a6c40f CLSA-2026:1791282362 TuxCare License Agreement 0 - CVE-2026-84782: reset s->init_off on DTLS handshake retransmit and skip retransmission while a handshake write is suspended - CVE-2026-35189: compute relative CRLDP names on demand instead of for every cached certificate - CVE-2026-72897: refresh ssl_pkey_num and valid_flags in SSL_set_SSL_CTX - CVE-2026-54872: pin the scalar width in the EC ladder so BN_add padding no longer depends on the secret nonce - CVE-2026-75805: skip the issuer/serial comparison for CSR-based CMP revocation requests - CVE-2026-75806: fail short TLS 1.2/DTLS AEAD records without sending an alert Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-84782: reset s->init_off on DTLS handshake retransmit and skip retransmission while a handshake write is suspended - CVE-2026-35189: compute relative CRLDP names on demand instead of for every cached certificate - CVE-2026-72897: refresh ssl_pkey_num and valid_flags in SSL_set_SSL_CTX - CVE-2026-54872: pin the scalar width in the EC ladder so BN_add padding no longer depends on the secret nonce - CVE-2026-75805: skip the issuer/serial comparison for CSR-based CMP revocation requests - CVE-2026-75806: fail short TLS 1.2/DTLS AEAD records without sending an alert

0 tuxcare-almalinux9.8-esu openssl-3.5.8-1.el9_8.tuxcare.els1.aarch64.rpm 7ca38a83c179061a2643f7162de4a29d484270eabc57c1870053a75645118828 openssl-3.5.8-1.el9_8.tuxcare.els1.i686.rpm e522aad6a1fbe590b8195466b40495c5ccd9a271b00a0c208da25a228fe6906b openssl-3.5.8-1.el9_8.tuxcare.els1.x86_64.rpm 03f0b47e043bdfb94be36323ea5592a896a9910b79349d83753667020080fb05 openssl-devel-3.5.8-1.el9_8.tuxcare.els1.aarch64.rpm 3493313660aed3cc71e3c1beadb55f3c0ea934f69ce6dc8df48a8b3a5e90897b openssl-devel-3.5.8-1.el9_8.tuxcare.els1.i686.rpm f0317a966b0bbea78dd02d68b696778a150261bc8e8d2623534b6a94e70f592b openssl-devel-3.5.8-1.el9_8.tuxcare.els1.x86_64.rpm 8db31e07da990e9c04637141d660e3c808cc77c2cd2b523d6bfe8920ce3ce00b openssl-fips-provider-3.5.8-1.el9_8.tuxcare.els1.aarch64.rpm fd125431aaa6bf9ec57c762a55d5f705a1e6d2044e37efd6a22fe6d2f31a9ab9 openssl-fips-provider-3.5.8-1.el9_8.tuxcare.els1.i686.rpm 9b66079fba8a677b6556b0890ce778ef6322ce4284c0e89095797ca1ae593961 openssl-fips-provider-3.5.8-1.el9_8.tuxcare.els1.x86_64.rpm 4e6f795a4e9370064d33c1c74e63b9ac7da41dbc8c01d41024f48d623546da0e openssl-libs-3.5.8-1.el9_8.tuxcare.els1.aarch64.rpm 01284e74365ca15fd6d689cffae4a8250a9100c8b9b887ed683b3589dae9b442 openssl-libs-3.5.8-1.el9_8.tuxcare.els1.i686.rpm 7cffae79102752e5ef244f6975beb1ee901df9f52eefd1ea1ce9ab92d394f2ce openssl-libs-3.5.8-1.el9_8.tuxcare.els1.x86_64.rpm 5a79f4f7077b8aa862999b5d450b8355258c4692bdcae9012bd3da30d4c48e11 openssl-perl-3.5.8-1.el9_8.tuxcare.els1.aarch64.rpm 6a6842deaf2ce9301a148e01640254fea62f93aafd72000448a44d9f00379db3 openssl-perl-3.5.8-1.el9_8.tuxcare.els1.i686.rpm 8422ceecb9abf2db45cf53e114a3db70a9fd04223b80c40c653c5e76605068da openssl-perl-3.5.8-1.el9_8.tuxcare.els1.x86_64.rpm 3fc801b10a0553190ad402b82845079d491b8ab04e1c98e3b47727e12ce07351 CLSA-2026:1791283518 TuxCare License Agreement 0 - CVE-2023-39804: stack overflow in xattr_decoder() on a large PAX xattr value Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-39804: stack overflow in xattr_decoder() on a large PAX xattr value

0 tuxcare-almalinux9.8-esu tar-1.34-13.el9_8.tuxcare.els1.aarch64.rpm 4f322d31b779cee912e5115ad5445d831a5a6f199080b0f26391fa807d595c58 tar-1.34-13.el9_8.tuxcare.els1.i686.rpm 661b2d0168b2114e4e12883b7a547e3638c0f19cfc21ed7948d2905d72dc3b28 tar-1.34-13.el9_8.tuxcare.els1.x86_64.rpm e3bdad170e838a73a079b805500365390cafa9628235de07d9b452e688036f68 CLSA-2026:1791291421 TuxCare License Agreement 0 - Upgrade to openjdk-11.0.32.1+1 (GA). The following CVEs were fixed: - CVE-2026-60589: improve resource resolving - CVE-2026-61308: enhance HTTP connections - CVE-2026-70907: enhance TLS server - Update bundled FreeType to 2.14.3 following JDK-8385390 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-11.0.32.1+1 (GA). The following CVEs were fixed: - CVE-2026-60589: improve resource resolving - CVE-2026-61308: enhance HTTP connections - CVE-2026-70907: enhance TLS server - Update bundled FreeType to 2.14.3 following JDK-8385390

0 tuxcare-almalinux9.8-esu java-11-openjdk-11.0.32.1.1-1.el9.tuxcare.els1.aarch64.rpm cd1fffb9baa45243800fa782a513ff71e5c427e9b963545799c4a64c59cba13b java-11-openjdk-11.0.32.1.1-1.el9.tuxcare.els1.i686.rpm 87c084a2b512e13c5ec3db8cfc34bd63ccdc73729377f1f17ec2c78a4ac29e94 java-11-openjdk-11.0.32.1.1-1.el9.tuxcare.els1.x86_64.rpm ed23beec60445494614387445293c544e0931b2cd89586b12144746f41ef2d6b java-11-openjdk-demo-11.0.32.1.1-1.el9.tuxcare.els1.aarch64.rpm b7329ae4390414a3bd86ad6f8437c0ac1377666e57b2493040605e6c31fdde52 java-11-openjdk-demo-11.0.32.1.1-1.el9.tuxcare.els1.i686.rpm b0c29fa8baadef283f46407c7163fa819067636e3098776f46f1cca49840e530 java-11-openjdk-demo-11.0.32.1.1-1.el9.tuxcare.els1.x86_64.rpm 4e4c8d98d2c06a13573426d08964ed39867f0f0383b9c79eec4e363aa4453286 java-11-openjdk-devel-11.0.32.1.1-1.el9.tuxcare.els1.aarch64.rpm c530acd43c276a16fd5bc66658543ed12841b1132e4bddb21bf2175a940ee98c java-11-openjdk-devel-11.0.32.1.1-1.el9.tuxcare.els1.i686.rpm cb16cde3c6db36e66b2969e3687a90c62bffe782e58923f1e178fdc855bfdadf java-11-openjdk-devel-11.0.32.1.1-1.el9.tuxcare.els1.x86_64.rpm e17ec9bfaa6d132bba3dbaf7562081efde6201bf72100d18df9c2e575058303c java-11-openjdk-headless-11.0.32.1.1-1.el9.tuxcare.els1.aarch64.rpm 4e1c5f6902aa92f1d477e069430c79869a9e88aac0006f6a593ecfec9b5ebd28 java-11-openjdk-headless-11.0.32.1.1-1.el9.tuxcare.els1.i686.rpm c6a73c503cc5a2823456d29743a5f92820cea68ae78868067d94a7ccc164af8c java-11-openjdk-headless-11.0.32.1.1-1.el9.tuxcare.els1.x86_64.rpm 50117acef732d866c6b6e69a6d5f11a26e2c60693116c6c69b81d4605984d829 java-11-openjdk-javadoc-11.0.32.1.1-1.el9.tuxcare.els1.aarch64.rpm 128e9cdab24ae48e8117cea9cc2b234637c5801e0216257c78a66b307bf09523 java-11-openjdk-javadoc-11.0.32.1.1-1.el9.tuxcare.els1.i686.rpm efa3c2d2365c4bd335dbaeeff609a05db29518038d8b4c7a2fe7410b9440e90b java-11-openjdk-javadoc-11.0.32.1.1-1.el9.tuxcare.els1.x86_64.rpm dbd111e26d39ec0072ae64b94b5a17045489c5f22facdad8c64d536f238bfb51 java-11-openjdk-javadoc-zip-11.0.32.1.1-1.el9.tuxcare.els1.aarch64.rpm bc1b7f76599825f14bdc4b8136cc95f122a7bcfec355e1db3fa42d0690ae815d java-11-openjdk-javadoc-zip-11.0.32.1.1-1.el9.tuxcare.els1.i686.rpm 1be987d5d1c0934b7e8cfed81c94bff51c0401c759daad801af3ca3ff8c869a8 java-11-openjdk-javadoc-zip-11.0.32.1.1-1.el9.tuxcare.els1.x86_64.rpm a540e99b82a17ce1018c07c343e28075edaa16afa798c3a7af27c38832d1b986 java-11-openjdk-jmods-11.0.32.1.1-1.el9.tuxcare.els1.aarch64.rpm 381770b67cdc0cf37ccd5a4ff85e5fe7384fdd940c88c9a9009296c304713481 java-11-openjdk-jmods-11.0.32.1.1-1.el9.tuxcare.els1.i686.rpm ad1825cf6f567365a12490131850112cc3cc51915936e4f45cda9b24edb7727f java-11-openjdk-jmods-11.0.32.1.1-1.el9.tuxcare.els1.x86_64.rpm 162c56f7140b6fbf39c42c8794e0c4c406c6596c3ad48b489a2ce3a27f34cafb java-11-openjdk-src-11.0.32.1.1-1.el9.tuxcare.els1.aarch64.rpm 8b005f33d2b187662df711bfc44358a78b4a1b5e196cc6e276461efcc6d188bc java-11-openjdk-src-11.0.32.1.1-1.el9.tuxcare.els1.i686.rpm 755b8f85d2387dd96c19ae79538dbe20ea587062516cf7316d9904cb4c8a2f17 java-11-openjdk-src-11.0.32.1.1-1.el9.tuxcare.els1.x86_64.rpm 599147197cc440a310a4d8e2b9626dcb6ae3ba6a51a29f196ce500b0defb5447 java-11-openjdk-static-libs-11.0.32.1.1-1.el9.tuxcare.els1.aarch64.rpm b967ace564c8253b815d37e218d3c56483619b1ff689f8a64a140489268074db java-11-openjdk-static-libs-11.0.32.1.1-1.el9.tuxcare.els1.i686.rpm 00c786ccbcb0b3586c542eb07d4dac909e4ec8e0d911ed810a71db05dd465c5a java-11-openjdk-static-libs-11.0.32.1.1-1.el9.tuxcare.els1.x86_64.rpm 7c68866c7fae2df8c6101854f27bf1c0604fb13c391f710a8e82dcf5d296f9dd CLSA-2026:1791292627 TuxCare License Agreement 0 - Harden the PCX loader against a 16-bit truncation of the expected bytes per line (width 65536, 8 bpp) that bypasses the check added for CVE-2026-4887 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Harden the PCX loader against a 16-bit truncation of the expected bytes per line (width 65536, 8 bpp) that bypasses the check added for CVE-2026-4887

0 tuxcare-almalinux9.8-esu gimp-3.0.4-4.el9_8.10.tuxcare.els3.aarch64.rpm f3dbea6e59460e9be58e15454d8ef6a77ce98871eb1ab558bd7744d22a183d13 gimp-3.0.4-4.el9_8.10.tuxcare.els3.i686.rpm 163991465511ede264c3730fb2400b09b230d57e45753e0a4a900808013f6550 gimp-3.0.4-4.el9_8.10.tuxcare.els3.x86_64.rpm e51d3723d4941323ba1968f203942ab3771af2f1a52f4806d141692bf5b63a9c gimp-devel-3.0.4-4.el9_8.10.tuxcare.els3.aarch64.rpm 9af23697bc6ed031ebf6651b5595b2a17ad174aa8c7e6027f4ea968e30128bd0 gimp-devel-3.0.4-4.el9_8.10.tuxcare.els3.i686.rpm 581216dc3bf8afa1311fe1ef954a1678e9050f7d231b73cfb8d891057fb8f672 gimp-devel-3.0.4-4.el9_8.10.tuxcare.els3.x86_64.rpm dd6c17131456188adf44adb27d9ec5512390059711cc04809b5820a7f9a02a90 gimp-devel-tools-3.0.4-4.el9_8.10.tuxcare.els3.aarch64.rpm b5283fece17d5288e68b8152a8d015e72d58b959b54b686d7abc3ac337584583 gimp-devel-tools-3.0.4-4.el9_8.10.tuxcare.els3.i686.rpm 7a56d1d8b6997a1a4a974afdee52488a3aab97674048db1c234a9534fdb9d5f7 gimp-devel-tools-3.0.4-4.el9_8.10.tuxcare.els3.x86_64.rpm 8f9917e86a9b91028bd4a9af97f5520e6544d688eeec768a07027dde7a1e4fd9 gimp-libs-3.0.4-4.el9_8.10.tuxcare.els3.aarch64.rpm 585c86c016c9bf47a428f7f4e00b5a9aef93b7c7b41f4db8e8c8ee57052869f3 gimp-libs-3.0.4-4.el9_8.10.tuxcare.els3.i686.rpm a35709b43fbfbb6429cb976b96cc8b7e99448d6b5a2b319856741b7ee495a5bb gimp-libs-3.0.4-4.el9_8.10.tuxcare.els3.x86_64.rpm a6de1c5bf50609bfbd0b75d18024f1d1780050e1ebd603d5a480b506e5cf5849 CLSA-2026:1791296651 TuxCare License Agreement 0 - CVE-2023-49288: fix use-after-free in StoreEntry::startWriting() reachable via oversized replies with collapsed_forwarding enabled - CVE-2025-59362: fix mishandling of ASN.1 encoding of long SNMP OIDs in lib/snmplib/asn1.c (asn_build_objid) - CVE-2026-33515: fix validation of packet sizes and URLs in ICP - CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling when the on-the-wire payload exceeds the advertised mask size Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-49288: fix use-after-free in StoreEntry::startWriting() reachable via oversized replies with collapsed_forwarding enabled - CVE-2025-59362: fix mishandling of ASN.1 encoding of long SNMP OIDs in lib/snmplib/asn1.c (asn_build_objid) - CVE-2026-33515: fix validation of packet sizes and URLs in ICP - CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling when the on-the-wire payload exceeds the advertised mask size

0 tuxcare-almalinux9.8-esu squid-5.5-26.el9_8.tuxcare.els1.aarch64.rpm 50180d425f576df97f4051ee94c9a851d87d1b4c8269a777c05e3cbf1787c9a9 squid-5.5-26.el9_8.tuxcare.els1.i686.rpm c9b25d5c50dfaba08cc55b523cdd4d6503a556befac8fe4d8553d0ef44317361 squid-5.5-26.el9_8.tuxcare.els1.x86_64.rpm 4d028a48d0cd9240e44cb5a4610700c3ef7c46728fe584dc99ad840a772e2447 CLSA-2026:1791296887 TuxCare License Agreement 0 - CVE-2026-34479: fix Log4j1XmlLayout invalid XML 1.0 character escape Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34479: fix Log4j1XmlLayout invalid XML 1.0 character escape

0 tuxcare-almalinux9.8-esu log4j-2.17.2-1.el9.tuxcare.els1.noarch.rpm 7cda9b84052ad774fe4d15c00ac2081a9c00b632c1f6336f697a2f37b7408b12 log4j-jcl-2.17.2-1.el9.tuxcare.els1.noarch.rpm 0bf66c2e4f3d72a7088fd52d7de97a89f599ba5ca341d092074e21e7ee46afa9 log4j-slf4j-2.17.2-1.el9.tuxcare.els1.noarch.rpm 7ce2098a0682a27f7a0bced5256bb10433f3fc3652410b26e0cc9aa71503f9e8 log4j-web-2.17.2-1.el9.tuxcare.els1.noarch.rpm caa2ad12d4e16c69bda96e4c2f462e4bd55e380d18a978ba5df7aeacf985b3bf CLSA-2026:1791305666 TuxCare License Agreement 0 - Enable this branch to build pcre2 for tuxcare9.8esu; the AlmaLinux 9.8 vendor source package (pcre2-10.40-6.el9) is byte-identical to the 9.6 one already used here, so no source change is required Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Enable this branch to build pcre2 for tuxcare9.8esu; the AlmaLinux 9.8 vendor source package (pcre2-10.40-6.el9) is byte-identical to the 9.6 one already used here, so no source change is required

0 tuxcare-almalinux9.8-esu pcre2-10.40-6.el9_8.tuxcare.els4.aarch64.rpm a5fefa99488b90e346f061b321123d96347de55fc78c6927c15036146a7feef2 pcre2-10.40-6.el9_8.tuxcare.els4.i686.rpm 80152b8c1791a7a3ce420e5b4251ef16f05736bcfb7aa8a9e9c700d9191d7bd2 pcre2-10.40-6.el9_8.tuxcare.els4.x86_64.rpm afa13bbff3fbb145e377cdc4ce771aa488b8adde6c3b8863aa3a5635c878c11a pcre2-devel-10.40-6.el9_8.tuxcare.els4.aarch64.rpm e30fb4c87003f7cc48e8c91001266c810dc8326bbdfdc42f636ab25b2e953c4b pcre2-devel-10.40-6.el9_8.tuxcare.els4.i686.rpm 0dfe5869f4d5979a8990ee8b736146195cee30e11d67dc4ebeb336961c68d64f pcre2-devel-10.40-6.el9_8.tuxcare.els4.x86_64.rpm 30d74e4cf37487f1ad1c32dcf88fdc64bad495fd53af52d099c459f3232767b6 pcre2-static-10.40-6.el9_8.tuxcare.els4.aarch64.rpm 8d4b185e1654c682a1f5d7eae664a362e9ccc84ddccfb581e1d9d1200816435b pcre2-static-10.40-6.el9_8.tuxcare.els4.i686.rpm 4745406965955e206fd6396c615a19836a0c36da8cdfa9e5afe5e776522d41e6 pcre2-static-10.40-6.el9_8.tuxcare.els4.x86_64.rpm adc313eaf8a551bc5dc168776fe07dc89e6db96878fccc1d7d3927d75bbf04ea pcre2-syntax-10.40-6.el9_8.tuxcare.els4.noarch.rpm bfe105e08dd6761f6b60f6bb6e1d0f626f051bb38ceac203d28458568a8eda01 pcre2-tools-10.40-6.el9_8.tuxcare.els4.aarch64.rpm 6bb5bb65fbca83edad12309a5836cfcf4b042da57327b51038a0d87e17a0a375 pcre2-tools-10.40-6.el9_8.tuxcare.els4.i686.rpm 76aff1cbcaa40ae740751920bd45635bf76e36c9af3c8e74b83ca8d145db5079 pcre2-tools-10.40-6.el9_8.tuxcare.els4.x86_64.rpm d922c6a9cae074764839d94565d8498884d9d00c7dca1d9f2dd0cd2b2d5c69e8 pcre2-utf16-10.40-6.el9_8.tuxcare.els4.aarch64.rpm 869e60e59a9c4b6b27509a0c7aa32ee5957978476fe63ef3f9b22c93775d0b82 pcre2-utf16-10.40-6.el9_8.tuxcare.els4.i686.rpm 90fced237dba22e76969c3231f32b77d8b5b47c04b87e606a7698d316aaf4924 pcre2-utf16-10.40-6.el9_8.tuxcare.els4.x86_64.rpm 2e8d9247b170ff6c090d4d2319f53ea0120b22f2ae388a912f075a351d2930fb pcre2-utf32-10.40-6.el9_8.tuxcare.els4.aarch64.rpm 2012c470266fd678f0d00c984078f81b88366a847fd5d35b1909a1f64562a6c5 pcre2-utf32-10.40-6.el9_8.tuxcare.els4.i686.rpm a3b98aef68f81b4a601cfd60579057989758acb73dad9937776273a388fd2e85 pcre2-utf32-10.40-6.el9_8.tuxcare.els4.x86_64.rpm 9f18546e9a8fa0b7565b650a0c55f4c0312810e5af7a17e2fbc56499bc5256e5 CLSA-2026:1791311110 TuxCare License Agreement 0 - Rebase to ghostscript-9.54.0-19.el9_8.1; CVE-2026-39919 fixed by vendor - CVE-2026-103226: bound the control stack in the Type 1 to Type 2 font conversion used by pdfwrite - CVE-2025-27830: count every $Blend procedure entry in the length and bound the formatting of its numbers so the serialized procedure cannot overflow its buffer (upstream Bug 706923 and gs_snprintf) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase to ghostscript-9.54.0-19.el9_8.1; CVE-2026-39919 fixed by vendor - CVE-2026-103226: bound the control stack in the Type 1 to Type 2 font conversion used by pdfwrite - CVE-2025-27830: count every $Blend procedure entry in the length and bound the formatting of its numbers so the serialized procedure cannot overflow its buffer (upstream Bug 706923 and gs_snprintf)

0 tuxcare-almalinux9.8-esu ghostscript-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm cb764f18e47c660f59219b0efef9b996d89cb6e826fcf1c90069257f1215cdb8 ghostscript-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm 2412a34a5b34e48c075e883bdc99f9b97e93058fde20ed3644236542bf2c7cb4 ghostscript-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm 397f8e3c04af903d2ab08fcd4c9068ed80a172146fdff0cf861535b933d9d2ec ghostscript-doc-9.54.0-19.el9_8.1.tuxcare.els1.noarch.rpm 9de0f4d4401923f9a5188ee8da0695f3061d6c0ba8f057c6b0dae0d35e32951e ghostscript-gtk-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm a2530fb226605603a572052263512fa2fc261e21c6e86a8a4703d61c04f10807 ghostscript-gtk-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm d4d6b10265576b57976efd8f5f0146a201c5b0c385e0ce0d74262dfd23a53a7a ghostscript-gtk-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm b35693aebc2d6b5c9ca4e23ce1fa8b3c9761d07f58180cf6ac06101d0c5b44ae ghostscript-tools-dvipdf-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm d8fff4cf728179bd2597915340c6eef0a5d52dabc0404106a6afba08e8d0a1a1 ghostscript-tools-dvipdf-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm 6b81b4ecad6ae90b08f4ded0dfc6357c9780b4f178cb4a7a5c8dabff0d649047 ghostscript-tools-dvipdf-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm ab90e3c451e9dd6bb447e95068dc1302263edebd09d5356294f3e852d14e0fc2 ghostscript-tools-fonts-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm d0e22daf293ba55503bb337eef628260b2e0c188819f5c19acccf19799f2b6b3 ghostscript-tools-fonts-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm 925112ad8a3c614d4f740e401260d4774d8c2d8b75f9a05d1e9f05b710e0372c ghostscript-tools-fonts-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm a747cc72866ddfb07a2bae7f28134e7fcb53be4559ef8d90830d6d806ad8c405 ghostscript-tools-printing-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm 75ef93bfb992367c8c13843bbe458a1baa0deeda1edc701dc3d9ffdf6549ffc1 ghostscript-tools-printing-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm a645d1df52755a5eaaf10e9e9a54faed1bbf9fcd2e3a7951fb65d29052c0049c ghostscript-tools-printing-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm 09992f07d0bf79aade77549a4d2deb7a04e06fa68cc2f0283b16b425877a28b0 ghostscript-x11-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm c71e66e6bc1a244ca9bad098bb7d49c29cfcd27880e00f04f39757e81bc5bc64 ghostscript-x11-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm 5198254d25e74e4dc11b070f992d3a58cbbb4f77e3cef8f95a7242959ff83ef4 ghostscript-x11-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm 4fce4e42c133af8dcd7cdce4b9162373b3f38e6d68d87b225bf2c6e4d1303357 libgs-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm 8594d1b1a671c9194a1d1fdd6996b1e7c1d99f7c94fd976964555cb62409650e libgs-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm 40137694ff3138dbecf10f8757245308b88cc192e96dde80b0f0f1f120432320 libgs-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm 25247cfa14a880c60f453cd62fc433f12f645283010729d0cbbc0ef796610fce libgs-devel-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm 05474dacbfe352a0c89e4c32a32a15f453f731af01e434b28a765e1c652a41f6 libgs-devel-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm 92f27d898dfdeb518ec5b600c0bf422c3aa453e586de71cab7f79e4528399697 libgs-devel-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm 93533e71c0cd33d3cc030536e460b8fe9f78efb38367265f7afd59696ed672ee CLSA-2026:1791317539 TuxCare License Agreement 0 - CVE-2026-58470: integer overflow in parse_content_range() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58470: integer overflow in parse_content_range()

0 tuxcare-almalinux9.8-esu wget-1.21.1-11.el9_8.tuxcare.els1.aarch64.rpm 134dd7fab59a5a9f42e55c3cd275ba6db50c969b22f09f73c04827ef435c6176 wget-1.21.1-11.el9_8.tuxcare.els1.i686.rpm c194bd3a33a06e8f4e9f3ceb553d65a41f77c0d155bdb5fd43fe81a2376066e0 wget-1.21.1-11.el9_8.tuxcare.els1.x86_64.rpm 0def3a37b3d96b92ec751bdf10508b17c65031d8594460fcc2778f3bedbc80c2 CLSA-2026:1791370801 TuxCare License Agreement 0 - CVE-2026-58058: fix out-of-bounds read and length underflow in IPv6 extension header parsing in libnetutil Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58058: fix out-of-bounds read and length underflow in IPv6 extension header parsing in libnetutil

0 tuxcare-almalinux9.8-esu nmap-7.92-5.el9.tuxcare.els2.aarch64.rpm 6c1d988cb3cdd7284d25635cb83276b4dd4cce8e5cb712b76f2956d4cea8ac68 nmap-7.92-5.el9.tuxcare.els2.i686.rpm 681dca6cfc64508cfe9b87d00b1045052f8ad1458420820d70046ca4a7a18578 nmap-7.92-5.el9.tuxcare.els2.x86_64.rpm 481030e91088976f3a3daf3250d30c1fc2ab9a72349cfaed41aff0902752505c nmap-ncat-7.92-5.el9.tuxcare.els2.aarch64.rpm 7b257a74cb2e7390f6f9eef6c43478b2651deb4c1c79c202173095aa0c64fd5b nmap-ncat-7.92-5.el9.tuxcare.els2.i686.rpm 2de9d920aa5641759c92a5acc77c3381f965da6bb360b1c58ba88415d8c4a2de nmap-ncat-7.92-5.el9.tuxcare.els2.x86_64.rpm 5472e0cb88f58512f35b7479ab60d0c687313584ddc6d1f30889a719701f5608 CLSA-2026:1791374964 TuxCare License Agreement 0 - CVE-2026-13321: check every NSEC record of an RRset against the signer zone, not only the first one, on top of the vendor fix - CVE-2026-19668: bound the DS to DNSKEY matching in validate_dnskey() so a crafted DS and DNSKEY pair cannot force unbounded key tag and digest work - CVE-2026-77119: ignore an NSEC3 whose zone does not enclose the DS name when proving an insecure delegation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-13321: check every NSEC record of an RRset against the signer zone, not only the first one, on top of the vendor fix - CVE-2026-19668: bound the DS to DNSKEY matching in validate_dnskey() so a crafted DS and DNSKEY pair cannot force unbounded key tag and digest work - CVE-2026-77119: ignore an NSEC3 whose zone does not enclose the DS name when proving an insecure delegation

0 tuxcare-almalinux9.8-esu bind-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm 83d1ac85808d50c1508a5f99076538ddd6ea79ef366da00b698ac7dbfe2d8579 bind-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm 9e13029c28d3274afebbdb71a1ed88b81969b2f3e1fe882ceb657381c358cbca bind-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm b0e7478dc0f4587d1acc35727eda742b5413451b1868b732f78ef3b3ed0df8a3 bind-chroot-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm 232548d988f2c94df3ed1fe095da646fe0ab7436f21e56b6ae11be2d03e7dafd bind-chroot-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm 8e637fa34341aa3e42402dae191b2f2d6c58dffe051694d0cec9bbdbdf77b395 bind-chroot-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm 1f4ccd143599af3586a227e797ca53c2a71e284e1810aa2a3157396ea9e728c9 bind-devel-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm 21b7545ee671c08e22db709779dfefcfd81f8f96d3cee86a1ff89d0a008f08c7 bind-devel-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm 09fead8a33cd3be60ff31aa92c8116e14a7e60c4aa6371a5d85c5b25cd98a7be bind-devel-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm 5cfc7e693b1a6e1a66183ec64d92303f4a6aa9d8909f83c959c9f764f647934c bind-dnssec-doc-9.16.23-40.el9_8.9.tuxcare.els2.noarch.rpm 34e1973d490c9eec19d77f5a12aa80f71a5c4a69e42147c8358d08f673dc05ab bind-dnssec-utils-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm 7b12800e1ba7d1527295ac888476e038a2f35e60bb4e12c3debd29404ae19581 bind-dnssec-utils-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm 4c5aeebad49cd968d9f66c4847f43b2fb9be98fdcada69048c9d68851c8b796c bind-dnssec-utils-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm 97bd6aa97520457405732ac0e9a5b91d46abcbded0ba236e5fb2b5d0c5fdcd22 bind-doc-9.16.23-40.el9_8.9.tuxcare.els2.noarch.rpm e0b83912a33ab41a17fae95e2b6a2ba20f3e45c4f40a1ee798983006fd56a4c3 bind-libs-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm 44f2348ad3d08dd015352eaf40ad64856b79e4a1f5cc30ef3a2acf1104aceb68 bind-libs-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm 86ac44be968bc02b2a41be2e53652ce820e8d3aa494f001c1c3f23de03ebf576 bind-libs-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm 7115b367a07627f18092928e02d67319dbcdde359f99b18ba8a8d665ae755460 bind-license-9.16.23-40.el9_8.9.tuxcare.els2.noarch.rpm 60d8884bbb9edb9160e71640e42ddd00b5b52f8a05d403a2433599630942571d bind-utils-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm 5fb34732d6225c1f44d420514ac4d964516fc4b226a31269438a54e9ab0d1e09 bind-utils-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm 0a7f016f0570e47d2dc5b1a2375187bd0ad915881a09e59ca19a95881db3d39e bind-utils-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm 663e0897ede7c53b71655daea51a20f8ce21a7065e86723c74d0dfe205cbd65e python3-bind-9.16.23-40.el9_8.9.tuxcare.els2.noarch.rpm 8e522b846bce67ed8fa95fd3affb8de106e0931b5bc91194cd051f279cc6eb12 CLSA-2026:1791405894 TuxCare License Agreement 0 - CVE-2023-41056: fix possible corruption in sdsResize - CVE-2026-23631: delay full resync processing in readSyncBulkPayload while a timed-out script is still running on the replica Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-41056: fix possible corruption in sdsResize - CVE-2026-23631: delay full resync processing in readSyncBulkPayload while a timed-out script is still running on the replica

0 tuxcare-almalinux9.8-esu redis-6.2.24-1.el9_8.tuxcare.els1.aarch64.rpm 7f02b9a4a2feaa2e02bba2629373090f3afafc9e20c8ac0f7fb85a56bfec69ad redis-6.2.24-1.el9_8.tuxcare.els1.i686.rpm f598b18c11c1e11990502b849639383f73033a9015462db4a88df662c2c635a6 redis-6.2.24-1.el9_8.tuxcare.els1.x86_64.rpm 922ef83dbdc9ebf6c0caa833da76977577c1587f41170fd7ddfe3e0716531dc0 redis-devel-6.2.24-1.el9_8.tuxcare.els1.aarch64.rpm aab75e12628354868983249f6fc8369456d69b011aae5821d78d15250e76f2e2 redis-devel-6.2.24-1.el9_8.tuxcare.els1.i686.rpm f5d5485b13d6916535964857d9b73cd584345956f9a0dbb44efe3b85927cda93 redis-devel-6.2.24-1.el9_8.tuxcare.els1.x86_64.rpm 50a091ebda299fbed44bb72b8f58407efd29e784a290f951ae5ba200ea320629 redis-doc-6.2.24-1.el9_8.tuxcare.els1.noarch.rpm 4597c4ba89e90842f3ded5943e14f7eb4edf10bdf5becaf68ac7a8c28db1b063 CLSA-2026:1791455053 TuxCare License Agreement 0 - CVE-2025-11395: oci-archive, storage/pkg/archive: prevent writes outside the destination when extracting a crafted tar archive Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11395: oci-archive, storage/pkg/archive: prevent writes outside the destination when extracting a crafted tar archive

0 tuxcare-almalinux9.8-esu skopeo-1.22.2-8.el9_8.tuxcare.els1.aarch64.rpm 198b8e4d219baff06a1f17a2b533fdb6b896fc483b8c2993849befd1150abd7b skopeo-1.22.2-8.el9_8.tuxcare.els1.x86_64.rpm d2b08b07d73cbf56091cedb8957bb072580fb1ac3cb478d1c18af97667c75efd skopeo-tests-1.22.2-8.el9_8.tuxcare.els1.aarch64.rpm 64af75f8364828de89e9fa3b16ea65741a1edbfc3bb6219c5174565c31db1ac7 skopeo-tests-1.22.2-8.el9_8.tuxcare.els1.x86_64.rpm 98a07711d8ae36185b9a8f729e6483dc5bf167b34de89d2b007cf298e984e86e CLSA-2026:1791457116 TuxCare License Agreement 0 - CVE-2026-8376: fix heap buffer overflow in S_study_chunk when compiling a regular expression with a repeated fixed string on 32-bit builds - CVE-2026-57432: fix pack/unpack SSize_t overflow when computing structure size Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8376: fix heap buffer overflow in S_study_chunk when compiling a regular expression with a repeated fixed string on 32-bit builds - CVE-2026-57432: fix pack/unpack SSize_t overflow when computing structure size

0 tuxcare-almalinux9.8-esu perl-5.32.1-484.el9_8.tuxcare.els1.aarch64.rpm 86581b5a1c8bf34738b6dc642d1436ebef33a483ef7d841a22193cd0d0ba65a1 perl-5.32.1-484.el9_8.tuxcare.els1.i686.rpm 69eeb9267803eaffde7e9832eb781cba0567d9e83cb710174c64b5ccb16c2f1f perl-5.32.1-484.el9_8.tuxcare.els1.x86_64.rpm cb992ec16be2ad5388c765e33a46dd478c950678af3d1d6b91cfab6353fec533 perl-Attribute-Handlers-1.01-484.el9_8.tuxcare.els1.noarch.rpm 4f469b125e4adb008944b48b17fab847d435026d393c718c2e85301cfef7caed perl-AutoLoader-5.74-484.el9_8.tuxcare.els1.noarch.rpm a6ac840b01e94edd7cccc1cbc6ca01926c66fcdd2467f7872888485fe58bb1d2 perl-AutoSplit-5.74-484.el9_8.tuxcare.els1.noarch.rpm ecd913c04df09a48d75e83c5e2570680731b61f755164864abd2847e11273d25 perl-B-1.80-484.el9_8.tuxcare.els1.aarch64.rpm 697cd6693ee00069310732945eabf64ea7f0624ff20eea12bd2070a9bcf16d65 perl-B-1.80-484.el9_8.tuxcare.els1.i686.rpm 7581814284ca49d3d46268591082bb4a4a11f86c09fa9be5e2d125470018df46 perl-B-1.80-484.el9_8.tuxcare.els1.x86_64.rpm 99620f318e79cc8f044c2f709322886b19df83300ee748e47fd5635737ccc33f perl-Benchmark-1.23-484.el9_8.tuxcare.els1.noarch.rpm e124c53993ae9740f7080d1c0fdadc4042da2bc97183bbcaaa541a4f3b1942da perl-Class-Struct-0.66-484.el9_8.tuxcare.els1.noarch.rpm c6e4771f0c15384f658783ed4c5fb883f71cf36ed4a681b146f434a300fdf9e0 perl-Config-Extensions-0.03-484.el9_8.tuxcare.els1.noarch.rpm a4036572fb68164e433fbe4729b742601d1e9e20269cc34b30064336d776da0f perl-DBM_Filter-0.06-484.el9_8.tuxcare.els1.noarch.rpm 2ea4eec233762bf14e64a7e8adf1352a5f1bcb1efad6f007842a24569ec38195 perl-Devel-Peek-1.28-484.el9_8.tuxcare.els1.aarch64.rpm dd5244feebc4eeabf521225d6511edaa4e27a12a2179ffe890f1f4475337cfec perl-Devel-Peek-1.28-484.el9_8.tuxcare.els1.i686.rpm 35d7eab3abcd78d305dad3cf79b6e537136ba218eec812869e8445c30e90ff72 perl-Devel-Peek-1.28-484.el9_8.tuxcare.els1.x86_64.rpm 423cb466865dbe62d09c0cb820fa1dc002ae465fbb85918c5441a52178288344 perl-Devel-SelfStubber-1.06-484.el9_8.tuxcare.els1.noarch.rpm f165dd6c95d972a9814600fdc843d266d7b83251ffc3e9a4c4ca933981293a01 perl-DirHandle-1.05-484.el9_8.tuxcare.els1.noarch.rpm 6bbe001d4870166277d3e344f8cbd9102bffbe382875b4aea4b53659bf21799a perl-Dumpvalue-2.27-484.el9_8.tuxcare.els1.noarch.rpm 785a9d2e8077375a77c4ee405bbc9d0062163314eaa81a677fa5fec627614842 perl-DynaLoader-1.47-484.el9_8.tuxcare.els1.aarch64.rpm db6615e0dc7a166f3189ab6549f13ed028c070e56f8672027c3abaa393fa7d67 perl-DynaLoader-1.47-484.el9_8.tuxcare.els1.i686.rpm 0b2f25be99e4baeed9fb0d408e264a4f5f02fee457eac300c4a9f97f70669736 perl-DynaLoader-1.47-484.el9_8.tuxcare.els1.x86_64.rpm f583f7fd180761174087c81665c4f9b86f15a8cce912e00fdc370de31f74a734 perl-English-1.11-484.el9_8.tuxcare.els1.noarch.rpm b0d357f66f1880c0a591785cd8be4fe911f097bbbe8516fbfed6e53aa58e65fb perl-Errno-1.30-484.el9_8.tuxcare.els1.aarch64.rpm 9db692df5e5ef9e57c62bd3de1f1aceab03e330360d6c5fbf26fa805819acb4d perl-Errno-1.30-484.el9_8.tuxcare.els1.i686.rpm cdf380a0eb8e60a9bcf01b26062943e2459820596d8058cce5fda29ca17f1f37 perl-Errno-1.30-484.el9_8.tuxcare.els1.x86_64.rpm 284be6bab113ff96edf42ea727448aa8f7a0bff37f00f0b1dacadfecfe2bc262 perl-ExtUtils-Constant-0.25-484.el9_8.tuxcare.els1.noarch.rpm 4f6bb6ab771249de26b03432c6007658f0180cfe671b5168ca8b93de32e9b399 perl-ExtUtils-Embed-1.35-484.el9_8.tuxcare.els1.noarch.rpm 750c86f67df1ce5f0995d2e38fed966297a6cd5d3e264547f54542043cf40093 perl-ExtUtils-Miniperl-1.09-484.el9_8.tuxcare.els1.noarch.rpm dd087ce5b886419be121d2c62e6978da3b82c53ab13de700b298f80a3cfe4bae perl-Fcntl-1.13-484.el9_8.tuxcare.els1.aarch64.rpm 29bac58176c41d8762b81971ee54a110ff2d3053b9519f0a5b484dbd2a2d1487 perl-Fcntl-1.13-484.el9_8.tuxcare.els1.i686.rpm cadd8eb117b36dc286e76df0af0da7f77db6158b3e44fad8f7e58f854cd33937 perl-Fcntl-1.13-484.el9_8.tuxcare.els1.x86_64.rpm bc8c600d9b0cd6bfdc6a29216488197adecab576bfd878ecb22e39bcb0133fe9 perl-File-Basename-2.85-484.el9_8.tuxcare.els1.noarch.rpm 4e6061035c1ebca18aa655755e02a96c469720bd010635f2967a9ed05460a29c perl-File-Compare-1.100.600-484.el9_8.tuxcare.els1.noarch.rpm 4e7ebec91efce36f348eb04fbec4c7eb4cadefe5c8ab6d3b3bffb2e6b2ae8bda perl-File-Copy-2.34-484.el9_8.tuxcare.els1.noarch.rpm bf764b0765a100c555897638ffabcd5565ff844f0720920cb468c2dec6253f13 perl-File-DosGlob-1.12-484.el9_8.tuxcare.els1.aarch64.rpm 3e7f641e039f313817fab8c5cbac423ad1d78bf46944c5a46e448e65f22508ed perl-File-DosGlob-1.12-484.el9_8.tuxcare.els1.i686.rpm 060f4268786ee9c0e3923c9f038d8c43858344a75e363b7945b9243325745cbe perl-File-DosGlob-1.12-484.el9_8.tuxcare.els1.x86_64.rpm f000ab74f9883a41711c2f7b285e59717226a82c4b8ac0e7f6a9ae2057ed5c44 perl-File-Find-1.37-484.el9_8.tuxcare.els1.noarch.rpm ffb3c4d6fe320aa38abd792ceb1ab72bd0829bb8d0c981eba5a19cfdcd5b6dd8 perl-File-stat-1.09-484.el9_8.tuxcare.els1.noarch.rpm b63d58fb4234c3379b897512de5cd1dec33e795782b0d07e8d6c86eca22998bc perl-FileCache-1.10-484.el9_8.tuxcare.els1.noarch.rpm 9929dc4fbde19a5010bc1f865c459106dd990685242b882acc24ca0051e224a2 perl-FileHandle-2.03-484.el9_8.tuxcare.els1.noarch.rpm 74b3a526b76b1628f47ebf6bbcdf01a220f79f511eb7686021687f73e3d26fec perl-FindBin-1.51-484.el9_8.tuxcare.els1.noarch.rpm b2388a9bf70603a454d42e21472b962f61f963143dfa447459b75ee414e6b0cd perl-GDBM_File-1.18-484.el9_8.tuxcare.els1.aarch64.rpm dfc7595be60019fdcd7eff155cfa207f768a192a0ca2e72b4e5a76d33fb9c698 perl-GDBM_File-1.18-484.el9_8.tuxcare.els1.i686.rpm 2b50158fe96c1c73a93587ca01fad5b9b2b390b717dfcef0b5c70fd4aca3cda2 perl-GDBM_File-1.18-484.el9_8.tuxcare.els1.x86_64.rpm c13abae464a0028dd652db88c447f4b0766e3319a62ad467e21745a2ed8015d9 perl-Getopt-Std-1.12-484.el9_8.tuxcare.els1.noarch.rpm 407c00d7d6b40f4770e8f217aacfa5d40ff1e284e3bdf5293a8a4614ba9710b8 perl-Hash-Util-0.23-484.el9_8.tuxcare.els1.aarch64.rpm ccd081e6a2218b28c36044d5b7fe31a300d454b511f6b826c99507e2b186ac56 perl-Hash-Util-0.23-484.el9_8.tuxcare.els1.i686.rpm b932e6b4de573dfe03a843dd4799ffa7530a6803c44afabe94c60b59aafcb77c perl-Hash-Util-0.23-484.el9_8.tuxcare.els1.x86_64.rpm a41668fefb5a381e4c3032532686ad698fdd1666a7f66bb84b86846cae4936c7 perl-Hash-Util-FieldHash-1.20-484.el9_8.tuxcare.els1.aarch64.rpm 24ae846bfb8ccd94e395a25702cbca08051c7e09562150bf03d1f90d43fc44f5 perl-Hash-Util-FieldHash-1.20-484.el9_8.tuxcare.els1.i686.rpm 1020832bd5ae8a509c9aa9b1541454aac337d97600363afa8a8f67067ac7d330 perl-Hash-Util-FieldHash-1.20-484.el9_8.tuxcare.els1.x86_64.rpm 3d11993e924a79bfaf048bc7b82a075b985e27f48c468689d2b97319410287b9 perl-I18N-Collate-1.02-484.el9_8.tuxcare.els1.noarch.rpm 3c2a67082b81a8148a51f14ae103bc9353be7de380a175758f990dbd0ab62aca perl-I18N-LangTags-0.44-484.el9_8.tuxcare.els1.noarch.rpm 521757c5161162b54a178c78679fd08d2a2fd3f291dddea90cbc19caae89aa51 perl-I18N-Langinfo-0.19-484.el9_8.tuxcare.els1.aarch64.rpm 9cdcb1e265b93a80f3bbd5a3c138ffe9a8aa5a6b885da27399b417b85a8fd96f perl-I18N-Langinfo-0.19-484.el9_8.tuxcare.els1.i686.rpm 916e4ed819307653ef441cd0e65a57f9de8dfe318a71b3b5e3b244c15c08ee97 perl-I18N-Langinfo-0.19-484.el9_8.tuxcare.els1.x86_64.rpm 9d056ef7e1642d811a1541bc55b964e3acc2506fe3c08bd4f0886dc2d1050b21 perl-IO-1.43-484.el9_8.tuxcare.els1.aarch64.rpm 74c391f6bfe199e39209a64b9eb513d87a840012ce8dc76141bf817a090adfd1 perl-IO-1.43-484.el9_8.tuxcare.els1.i686.rpm f609733f1279790bed428b8d3bc5d1cc82321931b4087bc783311415920773c6 perl-IO-1.43-484.el9_8.tuxcare.els1.x86_64.rpm 6dbd694d271420967cc47bb847ddf5598f57066fefcacde7bec27af79a42d268 perl-IPC-Open3-1.21-484.el9_8.tuxcare.els1.noarch.rpm 9dc92fb96be0b8449a8af848d7b4d914a2a8d6f7eb8b1129dd9e953b11e1d2c0 perl-Locale-Maketext-Simple-0.21-484.el9_8.tuxcare.els1.noarch.rpm 19aa04ca2037daa1746f4ec7de411038081e7e309e9ec54d275e44bb64c37475 perl-Math-Complex-1.59-484.el9_8.tuxcare.els1.noarch.rpm 3a1233862d89c2b39bbc2d92856616c3dee4e99370680567f15b79805eb0f9bf perl-Memoize-1.03-484.el9_8.tuxcare.els1.noarch.rpm 0aaa3a4c30fd3266dbefc121058e2f1e97fd1c86cbf1c7ac75d5a0b095cc28d5 perl-Module-Loaded-0.08-484.el9_8.tuxcare.els1.noarch.rpm fa3170684fcffdcc2bd6a5ac77e3a291f2ac52e2c76ce935a09ce8dc65ecbae4 perl-NDBM_File-1.15-484.el9_8.tuxcare.els1.aarch64.rpm f3e2adaa1f8f321696c94594b8e54195ddd632f8d4b61c650b04e7db51108b40 perl-NDBM_File-1.15-484.el9_8.tuxcare.els1.i686.rpm 900369a665e85fc702596097d61422150be99324e5e6644e5226a7efd2c06c69 perl-NDBM_File-1.15-484.el9_8.tuxcare.els1.x86_64.rpm 6892f5c2210cd189c3b2b2375c3a3dce24f3c942f6c17bc75ffde2c9ea758f22 perl-NEXT-0.67-484.el9_8.tuxcare.els1.noarch.rpm ce4d474a3497973213dd26526d9970e9de58c2ec6e5803211ed5269d1585f15d perl-Net-1.02-484.el9_8.tuxcare.els1.noarch.rpm 5d97dfe91b3f3e32c46ad6d0af40225428b188edde8047b267abc45c69086dce perl-ODBM_File-1.16-484.el9_8.tuxcare.els1.aarch64.rpm 8bace16b0f62050593efad4dd183228fa2941c69c2b7f85bba5f0bb41dcbdbaf perl-ODBM_File-1.16-484.el9_8.tuxcare.els1.i686.rpm 38c747852680f35c2f306087a7bcc8bb0473dd01d11c99a71054012bb887c23c perl-ODBM_File-1.16-484.el9_8.tuxcare.els1.x86_64.rpm 311038aa7969df128dba130398dd83399dbeadf7bcc78a656a37f71fe75d4555 perl-Opcode-1.48-484.el9_8.tuxcare.els1.aarch64.rpm 82eccd7da192197c1642ec164c424cdd4d05dfc07dec00c1918b46b4869d52d5 perl-Opcode-1.48-484.el9_8.tuxcare.els1.i686.rpm b44ab7d708c65307de59eb9e1156886c85265fac2ff93c88e1e5318e170db79c perl-Opcode-1.48-484.el9_8.tuxcare.els1.x86_64.rpm 68b36dedb900e74600271dcfbd3bddab82c1e31dbd479ec74f6df24e057b4173 perl-POSIX-1.94-484.el9_8.tuxcare.els1.aarch64.rpm d62377e913dbb161f14d4344f37bf39438c422a77bccea53523710ca31321792 perl-POSIX-1.94-484.el9_8.tuxcare.els1.i686.rpm 2c16fd121d54f5ae1d22ae2af4c1464b721c2ed4d30e9de4d5576f09e2c3b706 perl-POSIX-1.94-484.el9_8.tuxcare.els1.x86_64.rpm 2b09aceb8e1488b15e44e010ca453b978a96c3ec48d94945eb3b90bb75c03bc3 perl-Pod-Functions-1.13-484.el9_8.tuxcare.els1.noarch.rpm d8f209efb423b7821fb142c7afa86f5da215d6beabfa40b49b806f5efc920a7e perl-Pod-Html-1.25-484.el9_8.tuxcare.els1.noarch.rpm d0c89053e6217dc5c6127271e13c801ecb2fd85828e2724df703ed3d22824554 perl-Safe-2.41-484.el9_8.tuxcare.els1.noarch.rpm 66b5a4baf1c5ca974d3cd1b47cd3934df56d4acfe67cf04851e9cf8242b317b1 perl-Search-Dict-1.07-484.el9_8.tuxcare.els1.noarch.rpm 7025af7551d12c65e4595c0c187762c84951c8e61e2c2a60e962931fd41fbbdf perl-SelectSaver-1.02-484.el9_8.tuxcare.els1.noarch.rpm 88192020dd5494a2bcacfcccfd07a6d702833bd7e852967a406565fbc4414c23 perl-SelfLoader-1.26-484.el9_8.tuxcare.els1.noarch.rpm f237382b402256e7e3ebacacfbaf4e95dd07467dc60b8b8a53ee6b5f979ef64a perl-Symbol-1.08-484.el9_8.tuxcare.els1.noarch.rpm 03b436439464d9d126f7d08a5000407032cebee9956234d318a5d10ee0472c52 perl-Sys-Hostname-1.23-484.el9_8.tuxcare.els1.aarch64.rpm 80644f2a1a0db6da709c94d1c88e3c0bf2793d0f4d923d51198ce0cce0ed3f23 perl-Sys-Hostname-1.23-484.el9_8.tuxcare.els1.i686.rpm e605c1f5a86b1d5c2d660b0c97e5c41da2981530e464c965ef41f79d233dffc4 perl-Sys-Hostname-1.23-484.el9_8.tuxcare.els1.x86_64.rpm 3e7c36dae7550bc99544674f8e5a31e7be16d0470be2fe491564373491ef25d8 perl-Term-Complete-1.403-484.el9_8.tuxcare.els1.noarch.rpm 1aea5600106f8e2f78c5eb7226cdc69f65a24c817250ac77b77660d624615d26 perl-Term-ReadLine-1.17-484.el9_8.tuxcare.els1.noarch.rpm e8a895302674b81880e2502970e50a61751a8053c9ca4478f9242de933ac89c6 perl-Test-1.31-484.el9_8.tuxcare.els1.noarch.rpm 2e75b3f55eadd6b8ce89e5bc353e499227fef9e37dfafb2ea34f0336f94826e3 perl-Text-Abbrev-1.02-484.el9_8.tuxcare.els1.noarch.rpm 8cfc607c98f68508c3535b7885572d780d26bdf5f8fc0ee6a6fc872a4bcd5093 perl-Thread-3.05-484.el9_8.tuxcare.els1.noarch.rpm 93730e2083fd39bf564c4d12c9b875c122bcf82a3a8250d0d9e2629df4fdfcf3 perl-Thread-Semaphore-2.13-484.el9_8.tuxcare.els1.noarch.rpm 9247c955aa2103839b9ff02c3cebc5790083d63028e209c23ccff56896ab19fb perl-Tie-4.6-484.el9_8.tuxcare.els1.noarch.rpm ddcaa173bc8b3ff7f0e0f196cf302f6411549919f039e66d9707a0194761e29f perl-Tie-File-1.06-484.el9_8.tuxcare.els1.noarch.rpm 288f2a65e6b9f07a424330eee0d0f94cac13976c34907466fc8c40e1d47539f7 perl-Tie-Memoize-1.1-484.el9_8.tuxcare.els1.noarch.rpm 3df75192e242da5a817e9318c6192792b5cfd7f74da54dafce61257e12697737 perl-Time-1.03-484.el9_8.tuxcare.els1.noarch.rpm 216fca3d49ef9e7ae8be97cea2ef38f2e3954a22f8106f2f8d0492d74197bd96 perl-Time-Piece-1.3401-484.el9_8.tuxcare.els1.aarch64.rpm b4e9eced486383a0eb5a0a51e2f88ac22b32f7b93255e7cddf28684fa2d05763 perl-Time-Piece-1.3401-484.el9_8.tuxcare.els1.i686.rpm 1514dabdefda1b027bbdcc297da4ee6143556f6b1bf6f2217b265614f6eedf9a perl-Time-Piece-1.3401-484.el9_8.tuxcare.els1.x86_64.rpm 9e24e414b4fdd3aa9972843a4a42e8a623654c20c556848f467a919287fbaba6 perl-Unicode-UCD-0.75-484.el9_8.tuxcare.els1.noarch.rpm 424f141b29623b68407e94f9e93ad6153edc539a2cd4ae57d0a1cf2cd88b25a0 perl-User-pwent-1.03-484.el9_8.tuxcare.els1.noarch.rpm e242db4ddb1f7473ef621aad6abc967f0e1f4becf50ddd0dd37811ae0c2c2415 perl-autouse-1.11-484.el9_8.tuxcare.els1.noarch.rpm 073028f0a4540379820a5e58c2c9be7e281496a5235bf0587a2a0d115adf8e0c perl-base-2.27-484.el9_8.tuxcare.els1.noarch.rpm 6e41b3d33baf2131443a2ccd47ae7a1598ef9ea30c726def6316557c7ef8c4f0 perl-blib-1.07-484.el9_8.tuxcare.els1.noarch.rpm 6b722e940a84cc5902bdd2da6c985b1ce208cfa7d1c10431e0e0705047749a58 perl-debugger-1.56-484.el9_8.tuxcare.els1.noarch.rpm b6e8fd8b46c7e56855214d8217196c6e06ac9218e7b2000961ae6a368c8d188f perl-deprecate-0.04-484.el9_8.tuxcare.els1.noarch.rpm df42e367af2f10b8c90c2d7faa934346d13259e0b01c7454a6c3a33111e7dfc9 perl-devel-5.32.1-484.el9_8.tuxcare.els1.aarch64.rpm 6b1ebc5b9b6ad3c984055cc1fcfddcbbf6d3ee3062fb2a81767b4c54dae1f5bd perl-devel-5.32.1-484.el9_8.tuxcare.els1.i686.rpm a4be21c5553007873e56f7348dbe6299c8494d12929371df44f918afd070f872 perl-devel-5.32.1-484.el9_8.tuxcare.els1.x86_64.rpm a56a3b26a1690610355ea57c86f23860ed58be179d605aab6686752fe1875d57 perl-diagnostics-1.37-484.el9_8.tuxcare.els1.noarch.rpm c05088578f5ffda64c8a30f12bee40b4a6734b935f45184438cffaefd4dff0c3 perl-doc-5.32.1-484.el9_8.tuxcare.els1.noarch.rpm 7ec0fd2f3cfb0a008caa641e8233cfb1d62321172e83431fb63930d06e669b64 perl-encoding-warnings-0.13-484.el9_8.tuxcare.els1.noarch.rpm cb468b13decc4d6c3abc79127c2849a3b83e6d4725c46e1429c4142ab290acea perl-fields-2.27-484.el9_8.tuxcare.els1.noarch.rpm 5d65d2e5320a4fef3b81e806121f665ce90ab3816f2caf68abdff1750a2a5c82 perl-filetest-1.03-484.el9_8.tuxcare.els1.noarch.rpm 1c442663cd71ab82c2191a6cb09c6f1ce1d931af81aa933ff20f6ff09f895ace perl-if-0.60.800-484.el9_8.tuxcare.els1.noarch.rpm 0a33dfab5e3ab53ce84dde95d5378d875503f40fe0aafee7aaffc43f5ebfad68 perl-interpreter-5.32.1-484.el9_8.tuxcare.els1.aarch64.rpm 1d44f0e54370b5b810ef59df0d49e0b212ae352f4cb3eaead727d9e6747860d8 perl-interpreter-5.32.1-484.el9_8.tuxcare.els1.i686.rpm a94ed509df5b4a18a4503ce5b45ce0efc5d461e738d7b385b02b61b6efab124b perl-interpreter-5.32.1-484.el9_8.tuxcare.els1.x86_64.rpm 42ab0042655ff0e4d464eed1031cf557c05df195a247b26740e19d46fa87ebff perl-less-0.03-484.el9_8.tuxcare.els1.noarch.rpm efee1d87c8155ff697f694a591b561ad007c0ee03d5ea803c4d9c5f204dcaa4e perl-lib-0.65-484.el9_8.tuxcare.els1.aarch64.rpm d5b7887df477a1ec7ec22f6cb70e40df226b2aed98bbb85c6a1e444e5562cf7c perl-lib-0.65-484.el9_8.tuxcare.els1.i686.rpm 385ccb3cddb9c62d66f13c0f7a9e08c0be54d47a5d498f5be26b63b765b87037 perl-lib-0.65-484.el9_8.tuxcare.els1.x86_64.rpm e11cb22a8f510f7443fa483ba4732cc923be8690ca9c435618178ab968d1c86e perl-libnetcfg-5.32.1-484.el9_8.tuxcare.els1.noarch.rpm 6a7a274576699302cf5b8399e0cd0887840ede3aca0131a4e0c53ec491629c16 perl-libs-5.32.1-484.el9_8.tuxcare.els1.aarch64.rpm 8dc2434d041b281798fe9a9b912ff6c2919d8fc0b712c6ae8d9ddcfbb6b307e2 perl-libs-5.32.1-484.el9_8.tuxcare.els1.i686.rpm 171e9b717e1ca582aedf8c0f7eb291a0b38604ce2bb1aed0bf0d2a36f5167ed7 perl-libs-5.32.1-484.el9_8.tuxcare.els1.x86_64.rpm fd7b993f4b59625d0ea5dc7b5d5cb9445769e070050442b165b73dd2d9de03ba perl-locale-1.09-484.el9_8.tuxcare.els1.noarch.rpm bef9d33b25192994e3780ff8ce9a5a6c9d7b64ef4fb1735fcf53d76275e0dce5 perl-macros-5.32.1-484.el9_8.tuxcare.els1.noarch.rpm 7a3d293a2491c74da538e53703c57c3b0acf2ee78f0467cc3799f50e8abe5d42 perl-meta-notation-5.32.1-484.el9_8.tuxcare.els1.noarch.rpm d52036e95b78025924e2f95d2bb4dce04d9256e5af35986765d664b27405827f perl-mro-1.23-484.el9_8.tuxcare.els1.aarch64.rpm f4a272eb30ee92f00597f8753a4c13a89088a4d88dd8892ea83417dee61fdd6e perl-mro-1.23-484.el9_8.tuxcare.els1.i686.rpm 89f4b712871468711999cf8be98811fe63b7ae849612089a248841fd8b774741 perl-mro-1.23-484.el9_8.tuxcare.els1.x86_64.rpm 015eaa9c361f411f26ffd658fafffc3f77336aa5fb21f75af1528bf858eef1cd perl-open-1.12-484.el9_8.tuxcare.els1.noarch.rpm 55a18cc431e2891da5a535cd153bf6e721cf4359af8afd72ba350b711314dd6a perl-overload-1.31-484.el9_8.tuxcare.els1.noarch.rpm a34db04dfed4d312e67eab2f49e38c8897045897454d4caada9f912db11f98f7 perl-overloading-0.02-484.el9_8.tuxcare.els1.noarch.rpm 71b0ce3b5badd78e6da213ce8f7effc5bd5a253d6ff684b9a4404972d1dd6099 perl-ph-5.32.1-484.el9_8.tuxcare.els1.aarch64.rpm 35b478bfa250f6146b7edd80a45142371781c1ac6bfa1d3470e6594f43c80977 perl-ph-5.32.1-484.el9_8.tuxcare.els1.i686.rpm f081f4faec9834c156815f7efc69b9a26ede77d5f78680a7d88543bf8eb52ea6 perl-ph-5.32.1-484.el9_8.tuxcare.els1.x86_64.rpm e1aaa442929ede4e21772f9a8ff188f71a91fefd9f314f7e99ad86fc4aa66071 perl-sigtrap-1.09-484.el9_8.tuxcare.els1.noarch.rpm 6a23429270c6f8fb67149b2b1091c4fde31d397cc44644b1c569bdf7b49d35f3 perl-sort-2.04-484.el9_8.tuxcare.els1.noarch.rpm 4209a076e1aaa64d96d517e6124e4683955ba3da358ccffae6fb050a69d09c36 perl-subs-1.03-484.el9_8.tuxcare.els1.noarch.rpm d2da7c2793398274f40ee124ecb26d17e810172a2174176b78655406fb7ec47b perl-tests-5.32.1-484.el9_8.tuxcare.els1.aarch64.rpm c65c849c32b886977ccee2a444b42057550e4aa7041621865d45401772341986 perl-tests-5.32.1-484.el9_8.tuxcare.els1.i686.rpm 43569aced4153b8a64d103c2eaeb9c86ddc8e8ac55d4b2ee1113bedca3a3a86f perl-tests-5.32.1-484.el9_8.tuxcare.els1.x86_64.rpm 5f9c311de10eefc50d63179efccefb962ae6ef091a706d19dac0e0f288daa225 perl-utils-5.32.1-484.el9_8.tuxcare.els1.noarch.rpm 23d3be4b7f8c5a52784e7d2f1c2e39598f8961234bc75bee2bc9dce323839869 perl-vars-1.05-484.el9_8.tuxcare.els1.noarch.rpm c98b66e7c2dbf18dfa0921cd35b00308f34ca2267469ceb9fb1efb8a4a685cbb perl-vmsish-1.04-484.el9_8.tuxcare.els1.noarch.rpm 7a7ee1e6814cb08437458f035c478d0ac197fccc46afc4ffb1ff115c3b774fcd CLSA-2026:1791457718 TuxCare License Agreement 0 - CVE-2024-47606: fix integer overflow when allocating system memory Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47606: fix integer overflow when allocating system memory

0 tuxcare-almalinux9.8-esu gstreamer1-1.22.12-3.el9_8.tuxcare.els1.aarch64.rpm ab825697afdf84a920fd91d02d8e5b6cc657e9083440d6246e7471483924c060 gstreamer1-1.22.12-3.el9_8.tuxcare.els1.i686.rpm edfa42e17b57a77263253174442b3d8521ac753ac9e97ef8969bdbead73486ab gstreamer1-1.22.12-3.el9_8.tuxcare.els1.x86_64.rpm 9546b1f8e890786690f8b3d4942b1439d41bdb12c31f41167cf3947a6c2c8e38 gstreamer1-devel-1.22.12-3.el9_8.tuxcare.els1.aarch64.rpm bfceeb5871c34535f3fc7075068e44e7670eeb6ccaffebcbfd87c837d6dd3004 gstreamer1-devel-1.22.12-3.el9_8.tuxcare.els1.i686.rpm f41d10e48441c70cf1e22e28d8dc23f8c448e64a2624eb6453a2e0fbd3e01ec2 gstreamer1-devel-1.22.12-3.el9_8.tuxcare.els1.x86_64.rpm 219399b47f82ff79ef7247037657c17d42af518862e89cfbf461a16c5cf7a3c2 CLSA-2026:1791458028 TuxCare License Agreement 0 - CVE-2026-0989: limit the RelaxNG include depth - CVE-2026-0990: prevent unbounded recursion in catalog URI resolution - CVE-2026-0992: ignore repeated nextCatalog entries in XML catalogs - CVE-2025-8732: limit SGML catalog include depth, skip repeated CATALOG entries - CVE-2025-27113: fix compilation of the explicit child axis in patterns Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0989: limit the RelaxNG include depth - CVE-2026-0990: prevent unbounded recursion in catalog URI resolution - CVE-2026-0992: ignore repeated nextCatalog entries in XML catalogs - CVE-2025-8732: limit SGML catalog include depth, skip repeated CATALOG entries - CVE-2025-27113: fix compilation of the explicit child axis in patterns

0 tuxcare-almalinux9.8-esu libxml2-2.9.13-14.el9_8.5.tuxcare.els1.aarch64.rpm a553b78680eb63050d24ab488d55cc70a13fb6b440025950fa2e10c26bef36e2 libxml2-2.9.13-14.el9_8.5.tuxcare.els1.i686.rpm af9f315a8fe64aa93c321d9b992538a19240c8003bb32bc7eed9a287251371bf libxml2-2.9.13-14.el9_8.5.tuxcare.els1.x86_64.rpm d7fabdaae23ca81ffea136eb706a0da2b8de354ab92eee8f6dd858e5714bbab2 libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els1.aarch64.rpm cb3ea639c6e18f0f71f433a82ee71f7c4b3a551e47ffbae8655ef7b3c64e80d4 libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els1.i686.rpm f3bb371ed1338d8f8cb32a6867f26526e206fe0f954196c2de941020c0c67f42 libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els1.x86_64.rpm 4d38f854d99b585e187585faa08dc4590b187254e74caad7f61c702088a70712 libxml2-static-2.9.13-14.el9_8.5.tuxcare.els1.aarch64.rpm b93880eb16b8fea2b8cf5c9d8b4c2feaf61628c829a5e83e00c5dde56ab79de3 libxml2-static-2.9.13-14.el9_8.5.tuxcare.els1.i686.rpm 8839b63c713450be04036db915cc1b120655bb0d469faa7149895ec47ecdb581 libxml2-static-2.9.13-14.el9_8.5.tuxcare.els1.x86_64.rpm e519169fd4e5e1c8669ecc98c1331202a8f41f84ae372725e0bc1fc359a75709 python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els1.aarch64.rpm f256afadcdbc67b99b59f917631c7ff740e6ab41cd16746c93772cb0339aba2d python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els1.i686.rpm 5ed889540f5454c28d30de321316bc66c849b3e9bc3b99b4873f6da43de3db2a python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els1.x86_64.rpm 06c7ced88e16a2746335e08df522a36866c0686bcfc1883d84d6028aa2802bd8 CLSA-2026:1791454013 TuxCare License Agreement 0 - CVE-2026-56288: fix a null pointer dereference in another_hunk() on malformed unified and normal diff hunks with no-newline markers - CVE-2026-56289: fix an infinite loop in locate_hunk() on hunks with a null range and a huge line number Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56288: fix a null pointer dereference in another_hunk() on malformed unified and normal diff hunks with no-newline markers - CVE-2026-56289: fix an infinite loop in locate_hunk() on hunks with a null range and a huge line number

0 tuxcare-almalinux9.8-esu patch-2.7.6-16.el9.tuxcare.els1.aarch64.rpm 7c4e9d9dcfe2b7468046b988171286ad4f6c575fb1a87c0aa24d8af47605ff2b patch-2.7.6-16.el9.tuxcare.els1.i686.rpm 1dba24fcad16349f05317517f11d57ec3369ce008b0268df27a2565af853173d patch-2.7.6-16.el9.tuxcare.els1.x86_64.rpm 0aa3fd715c6eeb72531a2b7129f5742ad425af7d1514c625a8c72ed4706f1d4b CLSA-2026:1791466334 TuxCare License Agreement 0 - CVE-2024-31047: compute pixel count, width and base offset with 64-bit arithmetic in exrmultipart convert() to prevent integer overflow Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-31047: compute pixel count, width and base offset with 64-bit arithmetic in exrmultipart convert() to prevent integer overflow

0 tuxcare-almalinux9.8-esu openexr-3.1.1-3.el9_8.4.tuxcare.els3.aarch64.rpm 2df614f024520ed65d18b36d19216b001180c5e6ef6710df898f995c7d45a5ad openexr-3.1.1-3.el9_8.4.tuxcare.els3.i686.rpm e25f6f11c946ddbff439977f1106189ee1219f45cfb6b7be4f6704152c3148fa openexr-3.1.1-3.el9_8.4.tuxcare.els3.x86_64.rpm ab7cb5d90a37f90ae6b386ade2280754fc1d77a15504e9891895722e49804c8e openexr-devel-3.1.1-3.el9_8.4.tuxcare.els3.aarch64.rpm 5f8ed0f992655c20ef1a6e4b8817661bf0a67983f5419459f8623e63dad67b56 openexr-devel-3.1.1-3.el9_8.4.tuxcare.els3.i686.rpm 48a23591dd5f1e13581b9669f8cc6709bde2f691190a4247fd0fb274af47883a openexr-devel-3.1.1-3.el9_8.4.tuxcare.els3.x86_64.rpm 848aa55a211e8e8fd5674b4b04999484e51abdb937c48aa5ff09e4318a048a16 openexr-libs-3.1.1-3.el9_8.4.tuxcare.els3.aarch64.rpm cc45403670f6d9afc352fce6c54aa6425d48aa88d30bfc0894da2bedef454f0f openexr-libs-3.1.1-3.el9_8.4.tuxcare.els3.i686.rpm 5a530606dc32f4b2aa693af6605fdb2db4c6ba39c57c598a69dd73f1a7bdd73f openexr-libs-3.1.1-3.el9_8.4.tuxcare.els3.x86_64.rpm 5a1a6a040cf89ba8175d4a0d4ac0c8ae218590f4c81d567e6f39de9ad16ab457 CLSA-2026:1791484952 TuxCare License Agreement 0 - CVE-2026-103531: stack buffer overflow in setcos_construct_fci_44() when type, security or proprietary file attributes exceed 64 bytes Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-103531: stack buffer overflow in setcos_construct_fci_44() when type, security or proprietary file attributes exceed 64 bytes

0 tuxcare-almalinux9.8-esu opensc-0.23.0-6.el9.tuxcare.els2.aarch64.rpm 465b3337fca5595730fd95ab8270d7a248513934cfb085dea8b0a78834e1d4bb opensc-0.23.0-6.el9.tuxcare.els2.i686.rpm 982ff798ee5391659d4a64d129ad8649048468d8d1b7c3d2018bc1671d1b5cf7 opensc-0.23.0-6.el9.tuxcare.els2.x86_64.rpm 648fb8c4dde98b855ab23f46bf3ab599ff867a80e688cce8af7905357b9ee048 CLSA-2026:1791460196 TuxCare License Agreement 0 - CVE-2026-41080: seed the hash flooding protection with a full 16-byte SipHash key and 16 bytes of entropy instead of a single unsigned long, and add XML_SetHashSalt16Bytes() so callers can supply a 16-byte salt Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41080: seed the hash flooding protection with a full 16-byte SipHash key and 16 bytes of entropy instead of a single unsigned long, and add XML_SetHashSalt16Bytes() so callers can supply a 16-byte salt

0 tuxcare-almalinux9.8-esu expat-2.5.0-6.el9_8.5.tuxcare.els2.aarch64.rpm af072d60ad77cd74441e6ac15bd7fad3d4c5dd1d71a6b943b29ba79b87445cbe expat-2.5.0-6.el9_8.5.tuxcare.els2.i686.rpm 86b2a521bae2978fef41e23de6c86a231a447e0d327116acddce4f444b678da9 expat-2.5.0-6.el9_8.5.tuxcare.els2.x86_64.rpm d9627763a0beed09fa1c0d6373884014a1e0de14431a8f1313a2982b2b8c5cd7 expat-devel-2.5.0-6.el9_8.5.tuxcare.els2.aarch64.rpm 0fddac8f4fb5490dd2ff5e0f94e4293ca5775e6ab740b216c708aca48a12ddf8 expat-devel-2.5.0-6.el9_8.5.tuxcare.els2.i686.rpm 98002bcf152a7f02176b74d053f67257d4fba363e62196354da2b254dda0f30f expat-devel-2.5.0-6.el9_8.5.tuxcare.els2.x86_64.rpm d17777d2b0788573b9984b01dd4a2bc862281212d144601c894f06e829f2aa71 expat-static-2.5.0-6.el9_8.5.tuxcare.els2.aarch64.rpm 3481780a4dd674853d33f5a1bf86405c2d7ab0d940341ec924531b3426bbb285 expat-static-2.5.0-6.el9_8.5.tuxcare.els2.i686.rpm bb735ff3c1724b120c7bf5a749ad947ccd53bafec5e66c2e780f243650af6517 expat-static-2.5.0-6.el9_8.5.tuxcare.els2.x86_64.rpm 4d5115908d11bf5b4bd605f5956ed0c35cf8540d663051317e399728a31930e2 CLSA-2026:1791461047 TuxCare License Agreement 0 - CVE-2023-2906: fix divide-by-zero in CP2179 timetag info response dissector Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-2906: fix divide-by-zero in CP2179 timetag info response dissector

0 tuxcare-almalinux9.8-esu wireshark-3.4.10-8.el9_8.1.tuxcare.els1.aarch64.rpm 83d2d6ed8dddb6a36f1064468477a02d20916cdeebb35866be1f3bf002bc0ef1 wireshark-3.4.10-8.el9_8.1.tuxcare.els1.i686.rpm e5352741daa381bbdc58889756d8d95ea7f2778d6333d5a900db5518b53c02e7 wireshark-3.4.10-8.el9_8.1.tuxcare.els1.x86_64.rpm e6420dc582084a89fb51c88d2c45e9ea75ae90c9c4b7fa5dd0dbeb5cb7bbd103 wireshark-cli-3.4.10-8.el9_8.1.tuxcare.els1.aarch64.rpm 3c484ddd655e813e8e5ee50d09e3e551df252318b32f7b6c116d7be7159e6759 wireshark-cli-3.4.10-8.el9_8.1.tuxcare.els1.i686.rpm 01e7c9c3fd8e226abdad4421c1b7fff4c995ecee5247f31b475a4ed61bb10e8d wireshark-cli-3.4.10-8.el9_8.1.tuxcare.els1.x86_64.rpm 63701cee24e3af6324e43b12722026a085100b066fd31cc5694e007a7bced8de wireshark-devel-3.4.10-8.el9_8.1.tuxcare.els1.aarch64.rpm 5f3a141eadd8c71fb4d0a38386c06c016bfdf0ce6d07c1abb5544b92e727962b wireshark-devel-3.4.10-8.el9_8.1.tuxcare.els1.i686.rpm 762a793303b1d97292586f6a87da7ba1d73ac1121d498bce5bad56dfd78e65b9 wireshark-devel-3.4.10-8.el9_8.1.tuxcare.els1.x86_64.rpm 8073dfa25b6e0cd6cb88c17506a20096cacd649eaf92cedd1d60226ff30facfb CLSA-2026:1791467693 TuxCare License Agreement 0 - CVE-2026-48005: mod_auth_digest: track the nonce count per nonce and record it only for a fully verified request - CVE-2026-73636: mod_auth_digest: enforce one-time nonces also when the client entry was garbage-collected - CVE-2026-73637: mod_auth_digest: do not use shared memory client entries outside the client lock - mod_auth_digest: RFC 2069 clients and AuthDigestQop none are no longer accepted (upstream 2.4.69 behaviour) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-48005: mod_auth_digest: track the nonce count per nonce and record it only for a fully verified request - CVE-2026-73636: mod_auth_digest: enforce one-time nonces also when the client entry was garbage-collected - CVE-2026-73637: mod_auth_digest: do not use shared memory client entries outside the client lock - mod_auth_digest: RFC 2069 clients and AuthDigestQop none are no longer accepted (upstream 2.4.69 behaviour)

0 tuxcare-almalinux9.8-esu httpd-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm c0f7bd2afdf1275d81922ec039eb905b2a8f53b33f422a67640e8ed635b1b739 httpd-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm 8f24fc08d810ef30195e93503ca73d5b6b4e0ab6e1de62bf9578f027ef3e3426 httpd-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm a18dd523dd9643012ece63645d1202a6ec19ef0f91ea13bec5ebe8057e3cead8 httpd-core-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm e12738c6773b17e8a94731d49f46dcb51f806e30f7f9f1adbd9cc1cf6866081c httpd-core-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm 64fdcfca568101851237d51a48b0eab6493a05f96cf72d0a71ce54bff97c82fa httpd-core-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm 25020bab917ade1d71a1898e14541d1f485a4bed1a0e779d701c4255f8749582 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm 6d1d4b291cae92d5c1414acbf2b73ec060c4c87a85de3fe1783a7df1b1e226c6 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm 9f34f3cb4ab577578fb1ec5b8d1dbcb2610ce57b72da573f4753e5eadedafbc5 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm 42f6d8751a566182aec04cf7f9d2fc5128893d145473ceec8ac0ec5d1117032a httpd-filesystem-2.4.62-13.el9_8.6.tuxcare.els2.noarch.rpm 9c5a7c8a3a6f036b39acef2e6ff26296b1391553da6e4576991c75183c73f655 httpd-manual-2.4.62-13.el9_8.6.tuxcare.els2.noarch.rpm df19878451fe1681a5aa6aa41161f3797a5b2d26132d51945e2b9fc1cfcd5d68 httpd-tools-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm 9a6f5271499e2497bf2a51aab9b61e45f0063b08d4b2ff67ddd350b06e384900 httpd-tools-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm 6892c23b5562c1ea99aa755cb5771727e4a2d87be79351c3fa54ab09c1740133 httpd-tools-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm 9796c6892849731394b7ccb1db88d143704f9a7ec55758e48164e714371b41bc mod_ldap-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm b922482809aef49a84279c72e51aceb46b92c02da62cfef96486a414b2b87eaf mod_ldap-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm a4003edc37268be8fb938054825f47c79405573917f1a8e3767e5041288d78c6 mod_ldap-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm 81e04f9259272ef05a3a6d79983edba3a111ba6de0669387aa02e69957e4a943 mod_lua-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm bd1ead0e043d7521e7cf615843bb0274bc32692dfbfd064b43124e4f877ea6eb mod_lua-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm 382f1cb668d676c15a4d3355e2c8551fef941660ada2e41b1a77ddd0bac8d6b3 mod_lua-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm 0148df72f90338cd3e1ddd8dfb4127b6c57c07da3f853afbb1205efb8168b714 mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm 1b198e0a9a0aa36caa6d193efc7a6a4855ff71755cff104e10951898768bf406 mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm 5888ff746fd58cc544850ce3255d2ef18ce72a31846387511715807a7f3d3dae mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm 6e0a71c207ad64ab01e2a2f1ef06ececb2f48cd99f2d2f0a73698a4f7fd26125 mod_session-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm 9fbc64ba0600b28c087e172c8f795ee078a320dccb80a52ff3708f114ba282b2 mod_session-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm 3e99cdfe4772445e63cb981f758f9cd494a9195c4dcbccecd7ac6a55b0c9e553 mod_session-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm ca8036293b904d13567bc0235e73e0c2263668a4791733c45888529f0925be12 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els2.aarch64.rpm aed60e913e67e3e5acfe1bb43f92a4aede19436fd839c9116306c6a2c76d9242 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els2.i686.rpm e6b4d64f2ff298aa710f122a2e246c74b4b4f52981962858654ba785049d3b54 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els2.x86_64.rpm 7f4d0b9a1c91693252f7f817b67251d6ee380fdaebb215dcd9ded6edbc7fe44a CLSA-2026:1791474754 TuxCare License Agreement 0 - CVE-2025-53859: buffer over-read in mail plain/login/cram-md5 auth handlers - CVE-2026-28753: auth_http/XCLIENT injection via a resolved client host name - CVE-2026-40701: use-after-free in ngx_ssl_ocsp_resolve_handler() - CVE-2026-42934: buffer over-read in recode_from_utf8() on split sequences - CVE-2026-42946: buffer over-read in scgi/uwsgi status line fallback parsing - CVE-2026-48142: buffer over-read in recode_from_utf8() on invalid sequences Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-53859: buffer over-read in mail plain/login/cram-md5 auth handlers - CVE-2026-28753: auth_http/XCLIENT injection via a resolved client host name - CVE-2026-40701: use-after-free in ngx_ssl_ocsp_resolve_handler() - CVE-2026-42934: buffer over-read in recode_from_utf8() on split sequences - CVE-2026-42946: buffer over-read in scgi/uwsgi status line fallback parsing - CVE-2026-48142: buffer over-read in recode_from_utf8() on invalid sequences

0 tuxcare-almalinux9.8-esu nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm 8e47432ba4811508cd8288ebf594739e1bb29c01c4661a63b6673e4e3427931e nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm 97db864713ce65262afe46097896be204f056471e3578e03114181779d847dd8 nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm d53403c3faf6d5c9fba23ceaeb93e1a691fe55a1f4064d486619f23d850c7b17 nginx-all-modules-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.noarch.rpm 835497e2d30dafe9cc8fd0a96dfb2851da669c097a27e25ce782f1bd1fc7318b nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm 65e203a25eb3b31979e892b1c1257c5a4188cbf68d4a7e49a43018de18ff2586 nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm 667bab43c2f2d54d9e73c076c88eaeca7867f85d04f1984163ddcd92dfa92845 nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm 37876a0d48855d5f9e89b19af142dc5138227735f30cf96f7babafb3dc713dcb nginx-filesystem-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.noarch.rpm b389fc9e73468f1570374ffb3538eed3aa77efe8f9b68ac844f305a1ab1a7957 nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm 9fa19aa3f30d227fa5fc6d8605d603b9ab0c30b7ac38b0fd17c60382142a68d7 nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm c371709ce3c0b9227daff4341949f95e8dfaad0a81a10fad8e0da8d0ae34c079 nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm c7ff6ee7d80ba08bfa7fd1d663e497f52d8dfe6a2e915840f6f59e5687dfb978 nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm d28ae864700664609287ef06298c1c0a443779f62ff8b98068c26b3be31dfc96 nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm 66180386565b53aedc00e965be04a216d78a203dbd6938912d85cbe5325aa6a3 nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm a7af9dab983d6809a1bddae3db3982a9dbd9c51b93a7947845414b93de1b8ed5 nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm 0972135f14447dd1629f0ef4ff18f9aa5161e4058a2765d31a0ee4cc26bede62 nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm e2e78f0bbb0bf828da59355f243f2cbfe37da09b34dc1790ada44eaa2a27530e nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm 4a1977e257b96212fdec9821a58842cc99203bab82cb551a532ce882fb4dc7a5 nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm cb673ebe156503b37f069f074540425b0e614a67a3602633860838eb1ed61ce5 nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm 52a3a71928695e667b125e657c16f8774d4e5cca0ba486fd88d83c22280bea7d nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm 668f74b5a07cbfd81615d89be74da1c7ac410f16603001f6f620f22a5972d999 nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm 18444ac6f8a9b24cb2888d425650696208ed09a30608041ef808c28bc577ce0f nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm d1768477bd0857bdd9445638cfd81e3b4c87ea193c52f5ced8c6b8892e60a3c6 nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm 6a6965d5d59e320de369a5998bfab734732c368aad1fba422e4bd34f00bec469 nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.aarch64.rpm f7650cd75dbc3d42fa99fbf24110e920e7c558f3232613618cf6b063fc48934f nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.i686.rpm e93514eeb722af48efa179944fcd2c7815ed0dc09f6489b848f2976699b94b3b nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els1.x86_64.rpm 868363449353c3ec0c6f9228252a09841f439153dedbe55784d0f3bf8c0fb4b2 CLSA-2026:1791462149 TuxCare License Agreement 0 - CVE-2026-56153: mod_charset_lite: bound the partial character buffer in finish_partial_char() - CVE-2026-46729: mod_heartmonitor: validate the heartbeat request body and query - CVE-2026-56154: mod_rewrite: copy the lookahead Vary value out of the subrequest pool - CVE-2026-63292: mod_vhost_alias: reject host name segments that overflow the interpolation buffer - CVE-2026-63718: mod_proxy_uwsgi: drop hop-by-hop headers from backend responses Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56153: mod_charset_lite: bound the partial character buffer in finish_partial_char() - CVE-2026-46729: mod_heartmonitor: validate the heartbeat request body and query - CVE-2026-56154: mod_rewrite: copy the lookahead Vary value out of the subrequest pool - CVE-2026-63292: mod_vhost_alias: reject host name segments that overflow the interpolation buffer - CVE-2026-63718: mod_proxy_uwsgi: drop hop-by-hop headers from backend responses

0 tuxcare-almalinux9.8-esu httpd-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm 0fe0e402c8cc0eebbfff44a5c034377573431530ee81f796d710f1ef0914db6b httpd-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm df3d6462669364ccc104c51f04569c251d8abff7c74dcad9776f3e9844f559d9 httpd-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm 050de47877edfb02f10f88ae514608c5ec96805fbe8b6347fccf73b0812464df httpd-core-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm 7c7fddeba29aed89719884fae18a16389151366cfff9e062543866027b436d15 httpd-core-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm 379693820ec4ef7a49b481c6e92807be5cc43ec0eadeda633fbbab032b31a547 httpd-core-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm 733c26b4a12a60b950b7a6d1a396eda6f865f84783f8fd7bd43f6488816673e3 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm 2cf3a7d6b466c9d6d648ec273a00cce0a360d3df370c7411ba4c2f09f8b8f66c httpd-devel-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm 4806947484cdca8b8def4867d422321c9c7ec258d76b7440ab4c7d62ed034a53 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm 6f7c8d0db0a794c36ceced9dceb8ac7778e9f0e1118c817c87c3da2a2bac5017 httpd-filesystem-2.4.62-13.el9_8.6.tuxcare.els1.noarch.rpm d2677a8c0a54585e9c3759247190bee1baded4d107666980c8d95f83da44b8fe httpd-manual-2.4.62-13.el9_8.6.tuxcare.els1.noarch.rpm ca5995a938c63a9ee6b1a6c0db69ad71c2811af246f822c707de29bbb8b9e66f httpd-tools-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm 4a08d1f56960994b6b2a934b48a0c1a6a629372a395391bd3d9447b429541620 httpd-tools-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm 1347c9e809a348465b9be714e5997180fa3f21cbfde8ce22332062e03388bf3a httpd-tools-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm d071fec682bde3a1f36e042392a94e3e80f8a1d6429523c33cc3e0189da86fcb mod_ldap-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm d686262552442aad3d41decb567f893547c8eb8e7133595b023dbf5c783424fd mod_ldap-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm a528386c46c42cc5022889c9940d518d1a2226cba47f7799564ffc55896b8ed6 mod_ldap-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm 97a263acb2ca71c7310f4964a708cfab121ca0963060bf9530cabf5fdef150dd mod_lua-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm 610e181469ebb64971144d2c7cb201c7757f7945bd03ed2699c66cf0baf0e720 mod_lua-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm 920365ebf12d4e0634b2ba8864833fd6757f702d822810ff2e57d640168a154e mod_lua-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm 54b5a6dd521a1b45cb162b91a9b704d4c4386a5f8889b9530f42cbe09caa6099 mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm 41b61bc639a04213b6833f7de468f1f82e5076d472e6d6f042b2ea45ed2b284a mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm 6d52fd9b57d104e85c84131d285a3264d42dd99a5236822a774b3f660cad7d3c mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm 979d9d8fd82898cf95503e877c6a336ea894bfbeca5c658ded6cb0796b591312 mod_session-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm e0ed23ad7d9818b297cd8681e2077a9a2374326cb1cf28fdc4ad9ab9ee5ab080 mod_session-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm 57a7cf4003a7aa27f685dad36568d2bfcb45522d68dd17434af917fa8c4f13cf mod_session-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm 58e1255e7075367de699b1d9aa2a757a30ac752c1b9c5b16fa0dbc2a3345748a mod_ssl-2.4.62-13.el9_8.6.tuxcare.els1.aarch64.rpm d3889de0907d617e065020c37a8a434bef815a98d148ae7eb623a6d6f6e288c9 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els1.i686.rpm a55bc551ea7c3bada459e24562fffba4562a44a35f14b89844003db5b89c19f4 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els1.x86_64.rpm d7f81f01a1eeae04b6d74d6cf4e8dbf583430c74e3e3168d46903701d4e94359 CLSA-2026:1791482381 TuxCare License Agreement 0 - CVE-2026-86138: prevent integer overflow in dictionary QName string allocation - CVE-2026-86143: prevent integer overflow before invoking output buffer write callbacks Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-86138: prevent integer overflow in dictionary QName string allocation - CVE-2026-86143: prevent integer overflow before invoking output buffer write callbacks

0 tuxcare-almalinux9.8-esu libxml2-2.9.13-14.el9_8.5.tuxcare.els2.aarch64.rpm 3cd524018af41ab069ec800b25cce059fda51e1889015cdb5789f7692d276f61 libxml2-2.9.13-14.el9_8.5.tuxcare.els2.i686.rpm 2ab1aec3fb8c8997754b9830d50586828e06175b8cb998686f233924c823ca33 libxml2-2.9.13-14.el9_8.5.tuxcare.els2.x86_64.rpm 23d737681e60f79f12c501c16b644c7e1f2cb4f6364216afe7b5ba773787fbdf libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els2.aarch64.rpm 6e4647355f3208287572c349c947209b5310d3734f1a98c3943aa2fb6a2c39d1 libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els2.i686.rpm 4d3c4197def2dd8ebde9ef158371fd93bf2584dbf58a06f780ed546e071e6cdd libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els2.x86_64.rpm 497f88c5c889c4ed045190bfded27dfdf9cb815a995c1dbc0d0460fcba5943a4 libxml2-static-2.9.13-14.el9_8.5.tuxcare.els2.aarch64.rpm 30baba2b8c89b6e0d37811998624e767d65d9376de276d9eb10e5ba179b011ff libxml2-static-2.9.13-14.el9_8.5.tuxcare.els2.i686.rpm b4b66b3be03ca2b1e34093ae1aa56b05fd381fff2d42e624ac9d68c454856061 libxml2-static-2.9.13-14.el9_8.5.tuxcare.els2.x86_64.rpm b129473ae2b7709d65b33f1084ba0e3e2e6d5615af426553ab7580a60b9e14b7 python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els2.aarch64.rpm 336e0573927ca6e9b38d98496c68eb16fe63ea6c9314537f3e7bf3377704e6eb python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els2.i686.rpm 0cc86d05422023c30c8212e455cedfa5cf183297af0741912527f5259d517540 python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els2.x86_64.rpm 3ed9668dc3ae6c38709ff189d6ea011a4e2eb5d2607cbcb7b592ffdb547e9c5d CLSA-2026:1791531442 TuxCare License Agreement 0 - CVE-2026-42772, CVE-2026-54873: replace the QUIC stream reassembly list with an rbtree-based quic_strm_reas.c and cap packet-buffer pinning per stream - CVE-2026-84784: advance cur_retire_prior_to only when RETIRE_CONNECTION_ID is acknowledged - CVE-2026-35191: credit unvalidated amplification once per datagram - CVE-2026-75804: report connection-level QUIC flow control errors Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42772, CVE-2026-54873: replace the QUIC stream reassembly list with an rbtree-based quic_strm_reas.c and cap packet-buffer pinning per stream - CVE-2026-84784: advance cur_retire_prior_to only when RETIRE_CONNECTION_ID is acknowledged - CVE-2026-35191: credit unvalidated amplification once per datagram - CVE-2026-75804: report connection-level QUIC flow control errors

0 tuxcare-almalinux9.8-esu openssl-3.5.8-1.el9_8.tuxcare.els2.aarch64.rpm c9d48fdf5b90aef4d35bc42fce0c92d4f636eaeea363182ac6c305eff7e5a8d6 openssl-3.5.8-1.el9_8.tuxcare.els2.i686.rpm 30e20c6bf4f704518d113aff264b04078f5fb0226340ed760f0a64966a835ead openssl-3.5.8-1.el9_8.tuxcare.els2.x86_64.rpm 4b8b9fa9448a405ff7d4be5a1a7b47c35cd03bfe7e3333fce9d440056d8f377a openssl-devel-3.5.8-1.el9_8.tuxcare.els2.aarch64.rpm 433baf5a029000c688c2f44dbecb3248b56dcf5185e72584f7712820c08c19ff openssl-devel-3.5.8-1.el9_8.tuxcare.els2.i686.rpm b461b5b7d4c8945491845c4c779ed1a65088400872c4a369d256b77a163c1dd8 openssl-devel-3.5.8-1.el9_8.tuxcare.els2.x86_64.rpm ea7f253d61fb755b850718aa7cf1fe8f871ce46fe11c5232449665cc888ef0fd openssl-fips-provider-3.5.8-1.el9_8.tuxcare.els2.aarch64.rpm 49554bada406117cbdc86e6b80531b3fff39337a17d080b3eaf600bb7708bfee openssl-fips-provider-3.5.8-1.el9_8.tuxcare.els2.i686.rpm f5269722288f1f1a327c062eab8af797d11faf07cd568be93049fff17358660f openssl-fips-provider-3.5.8-1.el9_8.tuxcare.els2.x86_64.rpm da645bc3e19a513f4e228c11c887bd04070d6ccdd2c530f352509577b82903ac openssl-libs-3.5.8-1.el9_8.tuxcare.els2.aarch64.rpm f0c4be98ddfc3a8cfa15a47c552225dc81637561387f92db79ccee2daa77a9be openssl-libs-3.5.8-1.el9_8.tuxcare.els2.i686.rpm c7988ab08abed96b69c547f31919df75287d7655cd067b1023dbff6e303b395e openssl-libs-3.5.8-1.el9_8.tuxcare.els2.x86_64.rpm da4b4ed4af937ac298eeb1debc4b99a9e202b7561566ee2efb20ffff44bff900 openssl-perl-3.5.8-1.el9_8.tuxcare.els2.aarch64.rpm fa5c75cf2a2b074a6d072cd84de908a28ca3ef9c7b768a826912a11ea41e54dd openssl-perl-3.5.8-1.el9_8.tuxcare.els2.i686.rpm 74410f2496c5dcaf6aca43fb816cfac02355be1efc05c3050170ac5093004332 openssl-perl-3.5.8-1.el9_8.tuxcare.els2.x86_64.rpm e18781f681b2be6dd099dee67bb73c728357faad98291be6d4cdd58fe64f9812 CLSA-2026:1791531781 TuxCare License Agreement 0 - CVE-2026-1467: validate the URI host, including an IPv6 zone ID, when a message is created or its URI is set; SoupServer answers an invalid request host with 400 - CVE-2026-3632: CR/LF in the URI host can no longer reach the Host header (CVE-2026-1467 host validation) - CVE-2026-3633: reject an HTTP method that is not an RFC 9110 token; SoupServer answers one with 400 - CVE-2026-66339: do not send Proxy-Authorization on a connection that does not go via the proxy (inside a CONNECT tunnel, direct) - CVE-2026-1539: strip Proxy-Authorization on a cross-origin redirect, including credentials negotiated through a 407 - CVE-2026-12547: use cached proxy credentials only for the proxy they came from - CVE-2026-3099: reject replayed and unissued nonces in SoupAuthDomainDigest, with a bounded nonce table and stale=TRUE renewal Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1467: validate the URI host, including an IPv6 zone ID, when a message is created or its URI is set; SoupServer answers an invalid request host with 400 - CVE-2026-3632: CR/LF in the URI host can no longer reach the Host header (CVE-2026-1467 host validation) - CVE-2026-3633: reject an HTTP method that is not an RFC 9110 token; SoupServer answers one with 400 - CVE-2026-66339: do not send Proxy-Authorization on a connection that does not go via the proxy (inside a CONNECT tunnel, direct) - CVE-2026-1539: strip Proxy-Authorization on a cross-origin redirect, including credentials negotiated through a 407 - CVE-2026-12547: use cached proxy credentials only for the proxy they came from - CVE-2026-3099: reject replayed and unissued nonces in SoupAuthDomainDigest, with a bounded nonce table and stale=TRUE renewal

0 tuxcare-almalinux9.8-esu libsoup-2.72.0-16.el9_8.3.tuxcare.els3.aarch64.rpm e06211d31e9ab10491990ccfea722a8dfe355e1f21b89ffab04b8006edf2965e libsoup-2.72.0-16.el9_8.3.tuxcare.els3.i686.rpm e41512882de05efff647a41cd8a01ddfb73db7bd9fe459809c1e80da6e7218d5 libsoup-2.72.0-16.el9_8.3.tuxcare.els3.x86_64.rpm 0ca027f163d70c941852662eb356908ad122925beeab4ceed21ceeff4bedaaad libsoup-devel-2.72.0-16.el9_8.3.tuxcare.els3.aarch64.rpm ab6616dded4cd2cfdf8b84a8500cd18baa410966b6591433331784c97fdf9f83 libsoup-devel-2.72.0-16.el9_8.3.tuxcare.els3.i686.rpm 39051bda0cfa5874244159363a1ba2099bccee8a6a901f0b3f08d2e83dc22c09 libsoup-devel-2.72.0-16.el9_8.3.tuxcare.els3.x86_64.rpm bf6b11a2869a7513b551044120521f66b231eb1507663e31b0c429aefeae7875 libsoup-doc-2.72.0-16.el9_8.3.tuxcare.els3.noarch.rpm 12f01fa945dc12dc8d7c652341bd70bad61c8d7239e781744b72c54cfd3b2c5f CLSA-2026:1791476906 TuxCare License Agreement 0 - CVE-2026-48715: fix stack buffer overflow in radvdump print_ff() Route Information option parser via crafted ICMPv6 Router Advertisement Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-48715: fix stack buffer overflow in radvdump print_ff() Route Information option parser via crafted ICMPv6 Router Advertisement

0 tuxcare-almalinux9.8-esu radvd-2.19-5.el9_8.tuxcare.els1.aarch64.rpm 73146e3dc4f6ecb3e575652b6fde6c0e71e03b139fbdbeac78c378dfbf003964 radvd-2.19-5.el9_8.tuxcare.els1.i686.rpm 211de7a04079bbbf06fea97bd55d2d780ffe8baa2bf77b632ce2cc503013e5ae radvd-2.19-5.el9_8.tuxcare.els1.x86_64.rpm 5b8b956b0981e17da2b844759d6dab752ec4ec63ef8081157d91d9603b100b42 CLSA-2026:1791483409 TuxCare License Agreement 0 - CVE-2026-41579: symlink escape in /dev setup and mountCgroupV1() - Build with GOFIPS140=off: golang 1.26.7-2.el9_8 defaults to certified, which cannot unpack its FIPS module under the read-only /usr/share/gocode GOPATH Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41579: symlink escape in /dev setup and mountCgroupV1() - Build with GOFIPS140=off: golang 1.26.7-2.el9_8 defaults to certified, which cannot unpack its FIPS module under the read-only /usr/share/gocode GOPATH

0 tuxcare-almalinux9.8-esu runc-1.4.2-3.el9_8.tuxcare.els1.aarch64.rpm 72fbed6837962122397381f82f18b64baf297ee2cecc4ab3e1cbb57688f76185 runc-1.4.2-3.el9_8.tuxcare.els1.x86_64.rpm d3cfa93403c270a18da5d1102b4539bcc9cbfc5796655686ded22598b5f68d60 CLSA-2026:1791534444 TuxCare License Agreement 0 - CVE-2026-33948: fix NUL truncation in JSON parser (validation bypass) - CVE-2026-33947: fix unbounded recursion in jv_setpath/jv_getpath/delpaths - CVE-2026-40612: limit containment check depth - CVE-2026-41256: fix NUL truncation in program files loaded with -f - CVE-2026-41257: fix signed-int overflow in stack_reallocate - CVE-2026-43894: cap numeric literal length to DEC_MAX_DIGITS - CVE-2026-43895: reject embedded NUL bytes in module import paths - CVE-2026-43896: limit recursive object merge depth - CVE-2026-44777: detect circular module imports - CVE-2026-47770: guard deep structural equality and comparison recursion - CVE-2024-53427: reject NaN with payload in jvp_literal_number_new() - CVE-2025-9403: replace reparse assertion in run_jq_tests() with a test failure Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33948: fix NUL truncation in JSON parser (validation bypass) - CVE-2026-33947: fix unbounded recursion in jv_setpath/jv_getpath/delpaths - CVE-2026-40612: limit containment check depth - CVE-2026-41256: fix NUL truncation in program files loaded with -f - CVE-2026-41257: fix signed-int overflow in stack_reallocate - CVE-2026-43894: cap numeric literal length to DEC_MAX_DIGITS - CVE-2026-43895: reject embedded NUL bytes in module import paths - CVE-2026-43896: limit recursive object merge depth - CVE-2026-44777: detect circular module imports - CVE-2026-47770: guard deep structural equality and comparison recursion - CVE-2024-53427: reject NaN with payload in jvp_literal_number_new() - CVE-2025-9403: replace reparse assertion in run_jq_tests() with a test failure

0 tuxcare-almalinux9.8-esu jq-1.6-19.el9_8.2.tuxcare.els3.aarch64.rpm a4faf7526598eb99e8ef66254eaee2b6cbf802a3c1e3e9917a0c905013fc0fbc jq-1.6-19.el9_8.2.tuxcare.els3.i686.rpm a0cbf124d540d21a9bd7c8c7345022023ac3d5e0bb694df2b3c28b3f68c6ec25 jq-1.6-19.el9_8.2.tuxcare.els3.x86_64.rpm 2f75d86da5e8cbdc65dcacb5fa1378a3fedd9345dd9516086eb4bf35e750beed jq-devel-1.6-19.el9_8.2.tuxcare.els3.aarch64.rpm f23d6405801678e9fe144a2e0b4f676d897532840158829d75395929c5d6d423 jq-devel-1.6-19.el9_8.2.tuxcare.els3.i686.rpm ed032520b01ceabf305a7c5b7af9d4c400718db7c0e3b5a47a609b15ecce34d4 jq-devel-1.6-19.el9_8.2.tuxcare.els3.x86_64.rpm f68b2f42662889716249e0dd248eada157fd66b4ae5c26e2fd849aa53f440ed2 CLSA-2026:1791535231 TuxCare License Agreement 0 - CVE-2026-76844: reset strm.next_in and strm.avail_in in gz_write() when a direct write fails, so a later gzwrite() after gzclearerr() cannot copy past the input buffer Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-76844: reset strm.next_in and strm.avail_in in gz_write() when a direct write fails, so a later gzwrite() after gzclearerr() cannot copy past the input buffer

0 tuxcare-almalinux9.8-esu minizip-compat-1.2.11-40.el9.tuxcare.els2.aarch64.rpm d725d51c46ec1b22689d0a90e7f0d1db9f3ab9e8877e266f59b6e3f0ba8e0911 minizip-compat-1.2.11-40.el9.tuxcare.els2.i686.rpm 5a89be2a060e770de85dbc5e79fd065226b3608ba9c1b1de82f17c953a6fa752 minizip-compat-1.2.11-40.el9.tuxcare.els2.x86_64.rpm 5f2c7ca2e5a1d2df0393497ff1a889df2467b65271cfddc5930a0e1d46fb67d5 minizip-compat-devel-1.2.11-40.el9.tuxcare.els2.aarch64.rpm bc8799fd9a4fa51db97ca19d646bad803798b3c4f7f0ce3235dc53d098565984 minizip-compat-devel-1.2.11-40.el9.tuxcare.els2.i686.rpm 7691215fd98cecb34211359f83ac87fbe19cb931f54fca3a68e173b54f6f6f0d minizip-compat-devel-1.2.11-40.el9.tuxcare.els2.x86_64.rpm 5ebf5826511fdeab4f9bee1045cbaacc69e544c7aaed2d81cb470469d245e56b zlib-1.2.11-40.el9.tuxcare.els2.aarch64.rpm 9b44aad45a58707ee3ce636817fa5aeb15fe655250b80ebf61d46e6b532098ed zlib-1.2.11-40.el9.tuxcare.els2.i686.rpm c01d9cbb5644d72a8330ba7865105d83220e64bdf8cd160a9503f4460f06178a zlib-1.2.11-40.el9.tuxcare.els2.x86_64.rpm 32348373bac0e63f3bac276cb5da41d7371a3ecfeadab665d6a2a94b7c455dc6 zlib-devel-1.2.11-40.el9.tuxcare.els2.aarch64.rpm 8ca1e7683136ced1eaeabcc248e7bbd62c9999705ddab17260d98952c4539419 zlib-devel-1.2.11-40.el9.tuxcare.els2.i686.rpm c19ca42d8d4c6fbc91be60b1173538c0d2b3e0998c3e6e8bce0e55c8822d056e zlib-devel-1.2.11-40.el9.tuxcare.els2.x86_64.rpm c95925f89ecabfc19af5fca775d19611be4df70d82653331e32237a4ccc991e5 zlib-static-1.2.11-40.el9.tuxcare.els2.aarch64.rpm c3f31b0e97ba9286fbffcc22c430bb618094e548bfec7552ef4cfebb023cd3d1 zlib-static-1.2.11-40.el9.tuxcare.els2.i686.rpm 6ba9ccc4dc6c6b9fdd0fd837bb8059600b8399551b5be0119d37bc3cd70c535d zlib-static-1.2.11-40.el9.tuxcare.els2.x86_64.rpm 47b46d3e781faf85fe191c7e51e3f2caf1c129a5df1b054bf98c81c8995235e5 CLSA-2026:1791551454 TuxCare License Agreement 0 - CVE-2026-0672: http.cookies: reject control characters in Morsel keys, values and parameters so they cannot inject extra header lines - CVE-2026-3644: http.cookies: reject control characters passed through Morsel.update(), |=, pickling and js_output() - CVE-2026-0864: configparser: normalize CR, CRLF and LF line endings in written values so a value cannot inject new sections or options - CVE-2026-4224: pyexpat: guard the recursion in conv_content_model() so a deeply nested DTD content model raises RecursionError instead of overflowing the C stack - CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression error instead of resuming from an invalid internal state - CVE-2026-11972: tarfile: stop _Stream.seek() at end of data so a truncated stream raises ReadError instead of looping forever - CVE-2026-82049: tarfile: resolve the hard link target before linking so that, with the data filter, a hard link to a symlink cannot recreate the symlink outside the destination - CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes (bound as a weak symbol; falls back to the legacy XML_SetHashSalt when unavailable), widening the hash salt from 8 to 16 bytes; with PYTHONHASHSEED=0 the zero hash secret now also reaches libexpat Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0672: http.cookies: reject control characters in Morsel keys, values and parameters so they cannot inject extra header lines - CVE-2026-3644: http.cookies: reject control characters passed through Morsel.update(), |=, pickling and js_output() - CVE-2026-0864: configparser: normalize CR, CRLF and LF line endings in written values so a value cannot inject new sections or options - CVE-2026-4224: pyexpat: guard the recursion in conv_content_model() so a deeply nested DTD content model raises RecursionError instead of overflowing the C stack - CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression error instead of resuming from an invalid internal state - CVE-2026-11972: tarfile: stop _Stream.seek() at end of data so a truncated stream raises ReadError instead of looping forever - CVE-2026-82049: tarfile: resolve the hard link target before linking so that, with the data filter, a hard link to a symlink cannot recreate the symlink outside the destination - CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes (bound as a weak symbol; falls back to the legacy XML_SetHashSalt when unavailable), widening the hash salt from 8 to 16 bytes; with PYTHONHASHSEED=0 the zero hash secret now also reaches libexpat

0 tuxcare-almalinux9.8-esu python-unversioned-command-3.9.25-7.el9_8.3.tuxcare.els1.noarch.rpm b635c6ba877c9ff9ec1ef2982a2d5c122dbcca3b7da98d06c4083d15e381df29 python3-3.9.25-7.el9_8.3.tuxcare.els1.aarch64.rpm 87a173dd25d8307c87b389b3e643647dc7d0f5abd2ba841c267fef2444a0b180 python3-3.9.25-7.el9_8.3.tuxcare.els1.i686.rpm 66bf9d28ba306804383c9c48ae55f88120134ef972ca21885ed7da750be850bc python3-3.9.25-7.el9_8.3.tuxcare.els1.x86_64.rpm 67bb49a110c5d7488fb45707723fa64afb31b95065568792b08d5338ddbdb55e python3-debug-3.9.25-7.el9_8.3.tuxcare.els1.aarch64.rpm afc4ff7c85ec8823ab5bb6a59eedc29e3a5da7334461ce0a01c543b6c8ff7a06 python3-debug-3.9.25-7.el9_8.3.tuxcare.els1.i686.rpm cb2e0b3b9e54548873f908807580915bcd0bcd82948669bb9515a42b0bcfb3ff python3-debug-3.9.25-7.el9_8.3.tuxcare.els1.x86_64.rpm e9a1ff856a3dfccf01af5d04dcb06f8e0ebad814791b10a6b5f30a5c0e901b2e python3-devel-3.9.25-7.el9_8.3.tuxcare.els1.aarch64.rpm 366695317f73ac8921f254017c9effcd73b88f16601eddfbecfbe6bf5fcffc02 python3-devel-3.9.25-7.el9_8.3.tuxcare.els1.i686.rpm b28c44b2c86167153cf33c31469664e6d7ee647a0ec5474fafa22b8db2c2fb5c python3-devel-3.9.25-7.el9_8.3.tuxcare.els1.x86_64.rpm a02604853b277b672acc5a4eadcec97d5856c818cb39ae9c4fdfc89c52d2f2b9 python3-idle-3.9.25-7.el9_8.3.tuxcare.els1.aarch64.rpm efbf7c2fb1e6c16c49dd9c53436129b21896979f5464247e2262b500b164c85a python3-idle-3.9.25-7.el9_8.3.tuxcare.els1.i686.rpm 289052c6b1223bed943b8637ff23190c3660a139af7b9d98950a5c560e797f5c python3-idle-3.9.25-7.el9_8.3.tuxcare.els1.x86_64.rpm 7f5764b2203e8876ac4279137c48499dbd1eed120daf6554d334842c89f381be python3-libs-3.9.25-7.el9_8.3.tuxcare.els1.aarch64.rpm 55c9db0a9720f695c29182ee3209ca378b5e96c5b25a9903c33885386c9b597e python3-libs-3.9.25-7.el9_8.3.tuxcare.els1.i686.rpm f50de9041274346843f3def3c3db96f65a39b063b3ea6c7c30b63db185beb315 python3-libs-3.9.25-7.el9_8.3.tuxcare.els1.x86_64.rpm 826adcae62c5cca1253050819f20934dd2bd7b0872820c91ac3fd5dcafface7d python3-test-3.9.25-7.el9_8.3.tuxcare.els1.aarch64.rpm f1766c6fa982f25a291e5301d7d0d8375cba0e2095c6b3c7984bbecf2627233e python3-test-3.9.25-7.el9_8.3.tuxcare.els1.i686.rpm e708a9ac8306ed1c14cea3756caf0e1eb3350bfe32a4610f562cc3ea68e4bde8 python3-test-3.9.25-7.el9_8.3.tuxcare.els1.x86_64.rpm 0d8abe3dd1f6cd2350a1e3e6bf8fd9de98aa66512e5f84d6844fa793af2387a0 python3-tkinter-3.9.25-7.el9_8.3.tuxcare.els1.aarch64.rpm 25dcb369a9ae0f6fd22c80c13045ebacec3487088702dd37b8f96e91d6d21976 python3-tkinter-3.9.25-7.el9_8.3.tuxcare.els1.i686.rpm 3e17d51b43161ab15a55ee6d2edc5cc77a07a5a7a2309528d44dbd41e8229e1f python3-tkinter-3.9.25-7.el9_8.3.tuxcare.els1.x86_64.rpm cab75402d8b91c407cbdf6f2cf2286f455696c24dbe32b42a36bc5ec1ee9124c CLSA-2026:1791551792 TuxCare License Agreement 0 - rebase onto AlmaLinux 9.8 2:8.2.2637-26.el9_8.23 - carry all TuxCare ELS backports: CVE-2023-0049, CVE-2023-0051, CVE-2023-0288, CVE-2023-0433, CVE-2023-2610, CVE-2023-4733, CVE-2023-4734, CVE-2023-4735, CVE-2023-4738, CVE-2023-4750, CVE-2023-4751, CVE-2023-4781, CVE-2023-5344, CVE-2023-5535, CVE-2026-26269, CVE-2026-39881, CVE-2026-52860 - also fixed by the vendor in this build: CVE-2026-73073 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto AlmaLinux 9.8 2:8.2.2637-26.el9_8.23 - carry all TuxCare ELS backports: CVE-2023-0049, CVE-2023-0051, CVE-2023-0288, CVE-2023-0433, CVE-2023-2610, CVE-2023-4733, CVE-2023-4734, CVE-2023-4735, CVE-2023-4738, CVE-2023-4750, CVE-2023-4751, CVE-2023-4781, CVE-2023-5344, CVE-2023-5535, CVE-2026-26269, CVE-2026-39881, CVE-2026-52860 - also fixed by the vendor in this build: CVE-2026-73073

0 tuxcare-almalinux9.8-esu vim-X11-8.2.2637-26.el9_8.23.tuxcare.els1.aarch64.rpm 5148570622d667be0861f729657590c6d25188c3ce9ceff9f32a6c29133266f5 vim-X11-8.2.2637-26.el9_8.23.tuxcare.els1.i686.rpm 32b0c38f0db7bee027828d2a8a3864dbe03b5f2c555a5ff9919cd71824bae8f4 vim-X11-8.2.2637-26.el9_8.23.tuxcare.els1.x86_64.rpm ebec76c12e8c8fc47113fd59d7934dd197fd6b91dd6b42ce3ee8666f939ff7eb vim-common-8.2.2637-26.el9_8.23.tuxcare.els1.aarch64.rpm 6553e086fc1850fc5b89c962d3890070cde222f3c75a038c3a8afa07d3344e7e vim-common-8.2.2637-26.el9_8.23.tuxcare.els1.i686.rpm 765d7d30985e75d8f0404a3aadc6d50ad5bfd1b541cc1221c81c9e6bc6c682d0 vim-common-8.2.2637-26.el9_8.23.tuxcare.els1.x86_64.rpm 13d943a9ec796fe1a2f06239a1ebbe500ed5023d3539e13df78a52148d2a8013 vim-enhanced-8.2.2637-26.el9_8.23.tuxcare.els1.aarch64.rpm 745d74bf59d9d57c57a70b41ea033022a90a3ad1d931066fc8a92cfbf846af19 vim-enhanced-8.2.2637-26.el9_8.23.tuxcare.els1.i686.rpm 16cd3f2837593664681c978fc76b067dcd5fab61cfdc37b12d54d9501801b581 vim-enhanced-8.2.2637-26.el9_8.23.tuxcare.els1.x86_64.rpm d2dc95133d313b5836134750b8d2cc4d678107407e51c23daa6ad6eb57b5a891 vim-filesystem-8.2.2637-26.el9_8.23.tuxcare.els1.noarch.rpm 3b8d615904fa9748986d1fd3b7c322a002157e57fa5a9b876ecc7a6f4ce2546d vim-minimal-8.2.2637-26.el9_8.23.tuxcare.els1.aarch64.rpm 1c3d8a2e389dbd9958b58939aa8ec11980c211ccea839ef8d9209293c0577c0f vim-minimal-8.2.2637-26.el9_8.23.tuxcare.els1.i686.rpm b4b6e4c87afced41b298fb18bd2cc1781e6fd162207c9658f300d0d46d5847f7 vim-minimal-8.2.2637-26.el9_8.23.tuxcare.els1.x86_64.rpm 46b0c97ab1c1998a5b497fe820d5bfd6c7752c54e68b2f2504262c4c6d75db5c CLSA-2026:1791552215 TuxCare License Agreement 0 - CVE-2026-63686: mod_xml2enc: on a charset conversion failure in xml2enc_ffunc(), pass the unconverted remainder through raw and remove the filter, and treat APR_INCOMPLETE as non-fatal Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-63686: mod_xml2enc: on a charset conversion failure in xml2enc_ffunc(), pass the unconverted remainder through raw and remove the filter, and treat APR_INCOMPLETE as non-fatal

0 tuxcare-almalinux9.8-esu httpd-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm b9eac78e87c0c67f7439fbdb71c4cc6747179a58ca4dc38e15f5996f01827279 httpd-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm 8ecdf5fab978bcbe7e8affd3f7212e43a93387c9f4130aa81201082516ac7a94 httpd-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm dd84431394cd59a42f4cbcc59c2ad74782d07e39ff58b4737c920c7a2423b476 httpd-core-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm 2f73b5662cf2a9098a70e445d3f4206362b086a28b9787c74e300594e353b912 httpd-core-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm ddcb9c8553e310a3d4ed78912145f012044793bd564db435ca64e9f9bfcf0836 httpd-core-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm a29df3670a77764af1a41e1f66b139d5bfddc9a6769ecba59cbe59db59e98f14 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm 221f66fc5cfe5e04e45c5bd846a95481342d29b81def923f199f8412633d6c04 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm 8bc7d66641c16c3501af98683d91d75f5cee411241a2085f07c528d563c736fc httpd-devel-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm 4e11d8cbfda9ab758ff22604e5d987580d74f25a11dddf79f46b6e74e42b0a5f httpd-filesystem-2.4.62-13.el9_8.6.tuxcare.els3.noarch.rpm af22e65c0060008e12d606131e8ae7cf7e7e5dababf0c806ff341c1acbe6e683 httpd-manual-2.4.62-13.el9_8.6.tuxcare.els3.noarch.rpm 9b3579e1e45c10c6902a7bae67c40c9a7306aafb520e7654f1b457cdbd9dee89 httpd-tools-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm f39eaee2334735e0e249a7535b5ed0140919cba3060e76a98917ab0f5d72d98a httpd-tools-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm 266d85da79959eb6b5c317f9278f4739e9b58b048eeef78627812105a14d16d1 httpd-tools-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm 639c34528d355dcf3832874a5eda14124465bdd2d632df27bd319c22b3249163 mod_ldap-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm 21c2a21f66cc8d48f5208e5d0c601bb86fe0b5d51c5ed57db87ff43fccc28811 mod_ldap-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm 2b837aa619796dd9f154a09f5a7e8cb4f5b30e21d7d214a62129099e206cd2f7 mod_ldap-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm 6bf0c88a058bdfa91b978bbebb8f6d8da00a4082248dac627e517afc8c4a0772 mod_lua-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm 4ef9b63cbe83b6c652098e2aecd3817af121068b1bb9b6bbc274e4fcc289e42f mod_lua-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm a8d300b4d6cb535fccfd8e525775afc7c7e587c7ef3389e7ff32ef0de508452f mod_lua-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm fc41cf7624f20d26e70d2b1459a0cd05c866380ada29869ee5f747f91ca794fc mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm b60453472947f658d6345f1be9b293f4087dfdbaa93e49b8c244a71df4e6c935 mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm 7b70e274ef2b03725c40cac85ba2681a58956f0f5180a3c0ad473746ebde4dad mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm 7da598d2336c8c28018e89d85e74d06dfe08a4c7162c755091e33bc1d88d7cea mod_session-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm bc615c7baecac70260da68641c35fa6bb874e8dcd00066ec108e46b7234fe727 mod_session-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm c54137998a103838d7c1dd4bdb3b1f9b7e4c2e60de90e68fd3098a62ff1b1968 mod_session-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm 10a80decc116edebe321e64face73c51b0e3ccc7e1460f21d8a54dbf141f1bd4 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els3.aarch64.rpm ea3383d0ead01d8d36b0938df96d7d33024cfa481abde40c6f6eda12aaa81c15 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els3.i686.rpm b57e8babeac922dfcbc969b18c37d25fcc219e585517bed3971624ad88f6c395 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els3.x86_64.rpm d9a51e44eb8f6a3ed3fc93d96fc79d01a565f3eff93227923bb0063b5e78477b CLSA-2026:1791477970 TuxCare License Agreement 0 - CVE-2026-90616: symlink following in flatpak_ensure_data_dir() and /var binds Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-90616: symlink following in flatpak_ensure_data_dir() and /var binds

0 tuxcare-almalinux9.8-esu flatpak-1.12.9-4.el9_8.1.tuxcare.els1.aarch64.rpm a8405d83c7b952dc765068b0c908948789c0ae535d9f58355bd456596a2f6654 flatpak-1.12.9-4.el9_8.1.tuxcare.els1.i686.rpm ceba864acb184ad0e6967c726eea024568ea1928eb7692abb1cc29d9feb9bd51 flatpak-1.12.9-4.el9_8.1.tuxcare.els1.x86_64.rpm 35872d6cda4f4dd7044d5335758b71416fcdd6826fd5225adf939e0afacbdb7b flatpak-devel-1.12.9-4.el9_8.1.tuxcare.els1.aarch64.rpm 52d5faf64e6bd9643130862081936ed55e17d230e9deb4bde0074a389f65f586 flatpak-devel-1.12.9-4.el9_8.1.tuxcare.els1.i686.rpm 4a0bffa4f54302c50525ea83004a4831385377a97cb0fd99b9648845a1768927 flatpak-devel-1.12.9-4.el9_8.1.tuxcare.els1.x86_64.rpm fbb2b8d86bf3300cbb0d5ada459482fb2acffea4fb5cc0f8c2987165b412e0f6 flatpak-libs-1.12.9-4.el9_8.1.tuxcare.els1.aarch64.rpm 9a721290db09cac2207f908e30e440e3c61bd1906d9998c7b7ef77f1cacade95 flatpak-libs-1.12.9-4.el9_8.1.tuxcare.els1.i686.rpm 88d16289888b3463f3a0b864cd665c028684cd91994d948102bed62642dc7166 flatpak-libs-1.12.9-4.el9_8.1.tuxcare.els1.x86_64.rpm f6bfe029aa50e70145d61b5b885f2a917a6b2f03e27a6648c5be4518506675c3 flatpak-selinux-1.12.9-4.el9_8.1.tuxcare.els1.noarch.rpm f72bc880de51e52be4149c68565ebb5bb888a96666a640c4d817c53d86b3d77d flatpak-session-helper-1.12.9-4.el9_8.1.tuxcare.els1.aarch64.rpm 3aec151a912fca0f14fa5f3c828a32c2bdfb08b2ff25db1be9fdac19c9689747 flatpak-session-helper-1.12.9-4.el9_8.1.tuxcare.els1.i686.rpm ac45b242aa7240b81ed505b44ac26dde0831c703c242557e3cf88453fc84ef6b flatpak-session-helper-1.12.9-4.el9_8.1.tuxcare.els1.x86_64.rpm 20b146e2055b5c05ff24a9bb4bbed3868701f6ed1e9d617b154a38b5166138c3 flatpak-tests-1.12.9-4.el9_8.1.tuxcare.els1.aarch64.rpm 20454f2e01c5314ed0654696f4f54940141e2875fb1885c9b70bc04bcc355681 flatpak-tests-1.12.9-4.el9_8.1.tuxcare.els1.i686.rpm ba9956ea29c7037fe6ca747ea370ba21d1a7558ab5c39cb32f18a7b894f98ea3 flatpak-tests-1.12.9-4.el9_8.1.tuxcare.els1.x86_64.rpm b9affae61ce1648931c0de25d2380ef9b781c1308952b9f606ba1f8f0af92811 CLSA-2026:1791553174 TuxCare License Agreement 0 - CVE-2026-21720: bound the avatar cache to 2000 entries so a signed-in user cannot grow it without limit - CVE-2026-28383: carry the upstream test for the oversized plugin resource request body Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-21720: bound the avatar cache to 2000 entries so a signed-in user cannot grow it without limit - CVE-2026-28383: carry the upstream test for the oversized plugin resource request body

0 tuxcare-almalinux9.8-esu grafana-10.2.6-23.el9_8.3.tuxcare.els5.aarch64.rpm 556ee8df46cb2fdca231401b55fcf959db04c7e13db61085325c3830a26eb8da grafana-10.2.6-23.el9_8.3.tuxcare.els5.x86_64.rpm 39e86a557aaa9ab1004ce83a6b8e3f68c192392cd7ba0dc80f9fbe1d48209fe9 grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els5.aarch64.rpm df218bca081675ef2c53b04b37e31a2c79b5c77366983da9c099a388da23b096 grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els5.x86_64.rpm 74eb75ba6428ec6acbd229e24b7b91f7f0f8985ef3d6d287c9d079b909890f6e CLSA-2026:1791571565 TuxCare License Agreement 0 - CVE-2026-33818: unbounded recursion in encoding/asn1 Unmarshal - CVE-2026-39820: quadratic string concatenation in net/mail consumeComment - CVE-2026-39821: ASCII-only Punycode labels accepted by x/net/idna process() - CVE-2026-42499: quadratic string concatenation in net/mail consumePhrase - CVE-2026-56853: missing ReadHeaderTimeout in net/http unencrypted HTTP/2 check - CVE-2026-56858: XSS via JS regexp context tracking in html/template - CVE-2026-56859: unbounded recursion in encoding/xml DecodeElement - CVE-2026-56860: quadratic complexity in net/url resolvePath - CVE-2026-56862: unlimited post-handshake KeyUpdate messages in crypto/tls - Rebuild with golang >= 1.26.7-1.el9_8 for the standard library fixes Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33818: unbounded recursion in encoding/asn1 Unmarshal - CVE-2026-39820: quadratic string concatenation in net/mail consumeComment - CVE-2026-39821: ASCII-only Punycode labels accepted by x/net/idna process() - CVE-2026-42499: quadratic string concatenation in net/mail consumePhrase - CVE-2026-56853: missing ReadHeaderTimeout in net/http unencrypted HTTP/2 check - CVE-2026-56858: XSS via JS regexp context tracking in html/template - CVE-2026-56859: unbounded recursion in encoding/xml DecodeElement - CVE-2026-56860: quadratic complexity in net/url resolvePath - CVE-2026-56862: unlimited post-handshake KeyUpdate messages in crypto/tls - Rebuild with golang >= 1.26.7-1.el9_8 for the standard library fixes

0 tuxcare-almalinux9.8-esu ignition-2.26.0-1.el9_8.tuxcare.els1.aarch64.rpm d6d7a3c4729783a9a9b7fcb4cc12891a0ef9513d9be56e9cb323fcf632de2ace ignition-2.26.0-1.el9_8.tuxcare.els1.x86_64.rpm e6ea86dbc78e01d13a705b598251c3ab343c9cea74b3025a0540e686320625cf ignition-edge-2.26.0-1.el9_8.tuxcare.els1.aarch64.rpm 997908cfdac764e8dfbc5662cbf0979c59fcef3987d963ec3a168fb84d61b347 ignition-edge-2.26.0-1.el9_8.tuxcare.els1.x86_64.rpm 4056d3a2e71aedc0838c3d66ac994256c029d9965f534232507334e72834e26c ignition-grub-2.26.0-1.el9_8.tuxcare.els1.aarch64.rpm 3ade8f8be878696536db94393e455d38f042029e66e322c4bc13881549d9927c ignition-grub-2.26.0-1.el9_8.tuxcare.els1.x86_64.rpm 432367c498fb10dec9eeb4518ad9b12dae934bc9c81ee8b5a1fa8408f776ae35 ignition-validate-2.26.0-1.el9_8.tuxcare.els1.aarch64.rpm 00c30b26cbf811f7ea5f7f308929e581666231819926a757b03a7e90c9cd3215 ignition-validate-2.26.0-1.el9_8.tuxcare.els1.x86_64.rpm b3d51c92f1207d6123f1e3e60536cd499ebbe638408e5119f88546a92055d1e1 CLSA-2026:1791573150 TuxCare License Agreement 0 - CVE-2026-19445: _ssl: look the SNI servername callback's SSLContext up from the SSL object instead of the borrowed servername arg, and unregister the callback in context_dealloc(), so the callback is no longer reached through a released SSLContext - CVE-2026-19553: ssl: SSLObject._create() now warns with DeprecationWarning when check_hostname is set and server_hostname is None, and rejects server_hostname or session in server mode with ValueError Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-19445: _ssl: look the SNI servername callback's SSLContext up from the SSL object instead of the borrowed servername arg, and unregister the callback in context_dealloc(), so the callback is no longer reached through a released SSLContext - CVE-2026-19553: ssl: SSLObject._create() now warns with DeprecationWarning when check_hostname is set and server_hostname is None, and rejects server_hostname or session in server mode with ValueError

0 tuxcare-almalinux9.8-esu python-unversioned-command-3.9.25-7.el9_8.3.tuxcare.els2.noarch.rpm 462f3e972ec5919479d5441c5246d6192477cae22d54af2492281ebb7cb81b90 python3-3.9.25-7.el9_8.3.tuxcare.els2.aarch64.rpm 7390fa8dafb533306f5143c1435f99fe9adc41c82dfaf163a2ef628b8ed43b5d python3-3.9.25-7.el9_8.3.tuxcare.els2.i686.rpm 2437f71bc3ee6e05fa5f729b38a22476e5f484135acbb74e23c7c78aa2bd41db python3-3.9.25-7.el9_8.3.tuxcare.els2.x86_64.rpm 5e293b40134bd447387537abc8a4892d1ef5df2b209ba8c8198b5d8ef9b69d8f python3-debug-3.9.25-7.el9_8.3.tuxcare.els2.aarch64.rpm 6391e5addb3b82383810468bc27a4792879d07ffb10a100111a7389b4cfbda9c python3-debug-3.9.25-7.el9_8.3.tuxcare.els2.i686.rpm 719acd9d4349bc8ae27bc3dc949f30ca022a4eb9ee5151ff18ade2ebb021d5ab python3-debug-3.9.25-7.el9_8.3.tuxcare.els2.x86_64.rpm bf97814efe8c81644b2feb247d89238b9077c5f18e89c7c16f19c5dffcbf5134 python3-devel-3.9.25-7.el9_8.3.tuxcare.els2.aarch64.rpm 3a5909ee9af58db40deb1977cfc5a1f0fb244e7282c59b9699769e8ca347c505 python3-devel-3.9.25-7.el9_8.3.tuxcare.els2.i686.rpm c7b8c29616a56dc55a2055372df512fa5c19423e14fa342dbdbfc325ad8ab8de python3-devel-3.9.25-7.el9_8.3.tuxcare.els2.x86_64.rpm 42ce4ee54f720d11ae933c23065346ea1e248e3ad5c15e73dd7e689e18751583 python3-idle-3.9.25-7.el9_8.3.tuxcare.els2.aarch64.rpm 63b06634b20a0fb5c82f5682e23adb14c5a0ddcd62a72148478f78ce4d594d1e python3-idle-3.9.25-7.el9_8.3.tuxcare.els2.i686.rpm 1607dba1a9ccd53cfc475e4e2cbbcf26a88d2a662f52223354c1149b8c25a121 python3-idle-3.9.25-7.el9_8.3.tuxcare.els2.x86_64.rpm e4d4b7ee1f7d78f7e0f000d2c23bd1ead347d54812f45d15cb0c4167a2fc1c14 python3-libs-3.9.25-7.el9_8.3.tuxcare.els2.aarch64.rpm a8f653e614369df30103cf0c397698745dd0727671ad7a3fecd6eb273da7eb9b python3-libs-3.9.25-7.el9_8.3.tuxcare.els2.i686.rpm cd1d4927cfc995423a20cce8f3ca92c8c9ce140c219a32df6baac7ad94ecbdcf python3-libs-3.9.25-7.el9_8.3.tuxcare.els2.x86_64.rpm 90dfb5988785e4c7233b13a4d9767f47f30fc6b0bf75f8e6c5c4b3b5f9b24c26 python3-test-3.9.25-7.el9_8.3.tuxcare.els2.aarch64.rpm a13a24acd605c52870836f64607651dec98b144fe16ded08aed645d5a1b6f684 python3-test-3.9.25-7.el9_8.3.tuxcare.els2.i686.rpm 9a9593b1263cfba565fef5c203f47d75cc94711115d204617b8901d3b9003406 python3-test-3.9.25-7.el9_8.3.tuxcare.els2.x86_64.rpm 09fe72a0df786cfffde6de1f72a91f7510c7fde54b42a99412f2b67cd548b6ce python3-tkinter-3.9.25-7.el9_8.3.tuxcare.els2.aarch64.rpm 05ede6f3f55b52da13ed36afdefe810130c5b746d9eb98934f488e32feab74f5 python3-tkinter-3.9.25-7.el9_8.3.tuxcare.els2.i686.rpm 3354a2c97e6238ff180be805c8c9771dadf72174fd823855fff9b2f77f713312 python3-tkinter-3.9.25-7.el9_8.3.tuxcare.els2.x86_64.rpm 6b4a25b4ffe40f09592a15aeb2cff33d529e309bb278c9d0c69c170c46ea7dcb CLSA-2026:1791593131 TuxCare License Agreement 0 - CVE-2023-30571: umask race in archive_write_disk_new() - CVE-2025-5918: out-of-bounds read when skipping past EOF in file_skip() - CVE-2025-25724: unchecked strftime() result in list_item_verbose() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-30571: umask race in archive_write_disk_new() - CVE-2025-5918: out-of-bounds read when skipping past EOF in file_skip() - CVE-2025-25724: unchecked strftime() result in list_item_verbose()

0 tuxcare-almalinux9.8-esu bsdcat-3.5.3-11.el9_8.tuxcare.els1.aarch64.rpm df3faf900127bffcaaa13e41358f0569fcc398fed7ca55ecae574961416158b3 bsdcat-3.5.3-11.el9_8.tuxcare.els1.i686.rpm 5e0c19abb7e30f371e3cda5549ab3c34858d146981a66949a1c8dc5fa08d6ef8 bsdcat-3.5.3-11.el9_8.tuxcare.els1.x86_64.rpm ac329edd61f3122032e86964f0da733dcf1f7dbb1e4adc0b224786c85ad37eb2 bsdcpio-3.5.3-11.el9_8.tuxcare.els1.aarch64.rpm 60c9482fa8ef4d730357701354c4c81fec451dc39072388c602880a072c1df9b bsdcpio-3.5.3-11.el9_8.tuxcare.els1.i686.rpm a7822175bb6d2bd746840ae538bf9fbb9b67446ae422814fbb578f1c77a2be0b bsdcpio-3.5.3-11.el9_8.tuxcare.els1.x86_64.rpm fda2363c760203254eae33fc197e55e2fc8a6e241ad7c0956ce38a205c526687 bsdtar-3.5.3-11.el9_8.tuxcare.els1.aarch64.rpm 68d4efb7c4bd56f4d6f95d17cc5766d1ee58797102fe519bc7b6244b681e3e6c bsdtar-3.5.3-11.el9_8.tuxcare.els1.i686.rpm 5dfe07f0584e5598fe285875e83507764de473ec254588f330723c26c828768d bsdtar-3.5.3-11.el9_8.tuxcare.els1.x86_64.rpm 9db6b17a7ba820cbd030c964eb4c6085a0c5fe2696d71521b2f4d0cea731f091 libarchive-3.5.3-11.el9_8.tuxcare.els1.aarch64.rpm c119698ccbe6c83e6841cabecb4505e1db59dc9fba1fe2a0c4b028085e50135e libarchive-3.5.3-11.el9_8.tuxcare.els1.i686.rpm 1959539a7e7717752bbb745482b70a34e2db5984d0e0ab9fcfa7539f38b62170 libarchive-3.5.3-11.el9_8.tuxcare.els1.x86_64.rpm 90263412d9193c7d8705fd3ce468e3c3af2ace944b9798d61a74c3e112442be0 libarchive-devel-3.5.3-11.el9_8.tuxcare.els1.aarch64.rpm 966b74dff19c36fd37b4e8a85269dc092f5577720dd92d8c9b3fbd1b7a220ce3 libarchive-devel-3.5.3-11.el9_8.tuxcare.els1.i686.rpm 3180eea9c7a0b01752013b8ac90e6c5162652448c1ad6fad19e66b0ba98e1d78 libarchive-devel-3.5.3-11.el9_8.tuxcare.els1.x86_64.rpm 297a985df4fe3cac5dd963767124bed71bac98a78e96356cbedcdb0b03a32ed2 CLSA-2026:1791736154 TuxCare License Agreement 0 - CVE-2026-96808: symlink path traversal out of the base directory in revokefs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-96808: symlink path traversal out of the base directory in revokefs

0 tuxcare-almalinux9.8-esu flatpak-1.12.9-4.el9_8.1.tuxcare.els2.aarch64.rpm 3e9d6318cf3264f624a4c710c019ad16648962fccbcedb995bd15dcc09c220bb flatpak-1.12.9-4.el9_8.1.tuxcare.els2.i686.rpm c11533fbca7ae708263b5444c3ee1c1c62196ec04f2919d28cc8add41ed2dbf6 flatpak-1.12.9-4.el9_8.1.tuxcare.els2.x86_64.rpm 4b0e839c4edaa8f9c8952397b86e778c86f185030e114bd0b223252600086c97 flatpak-devel-1.12.9-4.el9_8.1.tuxcare.els2.aarch64.rpm 3c14066628ea450d27b66c2de73b3d69faca8fb20d6cabc0dec0d8369f60d860 flatpak-devel-1.12.9-4.el9_8.1.tuxcare.els2.i686.rpm ebad008830a8e256e7f779f6c8bf4bcf71de7dc52ca2b1b094253d212ea34fc5 flatpak-devel-1.12.9-4.el9_8.1.tuxcare.els2.x86_64.rpm 031b8012055fd5bdb3fda2dda0aabd10d57338f7e0b7644d8730e87f1189abdb flatpak-libs-1.12.9-4.el9_8.1.tuxcare.els2.aarch64.rpm 0b74ce84f276811e84f975a2b06753f09faeedebfff4636df9270554155d691e flatpak-libs-1.12.9-4.el9_8.1.tuxcare.els2.i686.rpm d6bde75a344c6771e665dbca6b8892be73780fc29b2189793f51780a97a1c228 flatpak-libs-1.12.9-4.el9_8.1.tuxcare.els2.x86_64.rpm 8a1026405d4992b1e78f6597a15842335501eb62d08f0c0682c75ecf1d725b3d flatpak-selinux-1.12.9-4.el9_8.1.tuxcare.els2.noarch.rpm 9640e180dd94aafb29e6606442ab4fe4029f2005cdbe7e7e7acdfe9f95d4fc40 flatpak-session-helper-1.12.9-4.el9_8.1.tuxcare.els2.aarch64.rpm 1e8a0cdcd680993f068633c2bd5bd4059f96fee2ae5f482b368a97c7e3f68722 flatpak-session-helper-1.12.9-4.el9_8.1.tuxcare.els2.i686.rpm 8b218ae28b52d13bbea568a7e0c9f801dec705568fc3a39470773a1f63a261df flatpak-session-helper-1.12.9-4.el9_8.1.tuxcare.els2.x86_64.rpm 747f10a71e1a025b4565ebdb040ecd3402c63d32324968e5a73af3d0fee67478 flatpak-tests-1.12.9-4.el9_8.1.tuxcare.els2.aarch64.rpm 1164f167cc45427301715232c3c1bb2ba40137ab39101949e1e89faf3c99b675 flatpak-tests-1.12.9-4.el9_8.1.tuxcare.els2.i686.rpm 3c735ed734147a9f16c4e2fb5d3530d115bcac949082516049abfa04be5e0931 flatpak-tests-1.12.9-4.el9_8.1.tuxcare.els2.x86_64.rpm 45fd70f2880f48918a8d7e346a316a41be3179937bf705023b01e588096e3690 CLSA-2026:1791737060 TuxCare License Agreement 0 - CVE-2026-46433: fix heap out-of-bounds read in lldpd_decode when stripping VLAN tag Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-46433: fix heap out-of-bounds read in lldpd_decode when stripping VLAN tag

0 tuxcare-almalinux9.8-esu lldpd-1.0.18-6.el9.tuxcare.els1.aarch64.rpm 9f2a99bd1f036b7342cb48f18b329add8a3abd14b314833e30bf10db68bab0d9 lldpd-1.0.18-6.el9.tuxcare.els1.i686.rpm 7a0451c32caffad2805432e2640423dc5bb9febcc65c69b8ad9b35e78affe87d lldpd-1.0.18-6.el9.tuxcare.els1.x86_64.rpm 8d2a4cbf2f206a832ffb6e23314eed7b134e0d102d4b24c0e6fe3e8e207decdd lldpd-devel-1.0.18-6.el9.tuxcare.els1.aarch64.rpm 27a03faa027d74f758a98fa952cb83e020742766817694c8e45c36474f0ac012 lldpd-devel-1.0.18-6.el9.tuxcare.els1.i686.rpm a1bfffdd89983af39ab91978baa92d6867c7457031112979a6c08529d7896322 lldpd-devel-1.0.18-6.el9.tuxcare.els1.x86_64.rpm 863b6d2b713d84f5250ee3e71cf1e2d8f496dfa7cdb66072c25ced1e944a1cc3 CLSA-2026:1791550916 TuxCare License Agreement 0 - CVE-2026-0672: http.cookies: reject control characters in Morsel keys, values and parameters so they cannot inject extra header lines - CVE-2026-4224: pyexpat: guard the recursion in conv_content_model() so a deeply nested DTD content model raises RecursionError instead of overflowing the C stack - CVE-2026-11940: tarfile: re-filter the member used for the hard-link extraction fallback so a deeper symlink cannot be recreated outside the destination - CVE-2026-11972: tarfile: stop _Stream.seek() at end of data so a truncated stream raises ReadError instead of looping forever - CVE-2026-3644: http.cookies: reject control characters passed through Morsel.update(), |=, pickling and js_output() - CVE-2026-0864: configparser: normalize CR, CRLF and LF line endings in written values so a value cannot inject new sections or options - CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression error instead of resuming from an invalid internal state - CVE-2026-15308: html.parser: buffer incremental feed() input so unterminated markup fed in small chunks is no longer parsed in quadratic time - CVE-2026-82049: tarfile: resolve the hard link target before linking so that, with the data filter, a hard link to a symlink cannot recreate the symlink outside the destination - CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes (bound as a weak symbol; falls back to the legacy XML_SetHashSalt when unavailable), widening the hash salt from 8 to 16 bytes; with PYTHONHASHSEED=0 the zero hash secret now also reaches libexpat Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0672: http.cookies: reject control characters in Morsel keys, values and parameters so they cannot inject extra header lines - CVE-2026-4224: pyexpat: guard the recursion in conv_content_model() so a deeply nested DTD content model raises RecursionError instead of overflowing the C stack - CVE-2026-11940: tarfile: re-filter the member used for the hard-link extraction fallback so a deeper symlink cannot be recreated outside the destination - CVE-2026-11972: tarfile: stop _Stream.seek() at end of data so a truncated stream raises ReadError instead of looping forever - CVE-2026-3644: http.cookies: reject control characters passed through Morsel.update(), |=, pickling and js_output() - CVE-2026-0864: configparser: normalize CR, CRLF and LF line endings in written values so a value cannot inject new sections or options - CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression error instead of resuming from an invalid internal state - CVE-2026-15308: html.parser: buffer incremental feed() input so unterminated markup fed in small chunks is no longer parsed in quadratic time - CVE-2026-82049: tarfile: resolve the hard link target before linking so that, with the data filter, a hard link to a symlink cannot recreate the symlink outside the destination - CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes (bound as a weak symbol; falls back to the legacy XML_SetHashSalt when unavailable), widening the hash salt from 8 to 16 bytes; with PYTHONHASHSEED=0 the zero hash secret now also reaches libexpat

0 tuxcare-almalinux9.8-esu python3.11-3.11.13-10.el9_8.tuxcare.els1.aarch64.rpm b180d6372c702f9d7c533b0817d05fd1b4616a963edf4f712c66d891fd88d2f3 python3.11-3.11.13-10.el9_8.tuxcare.els1.i686.rpm 66941f04d67ef819606b35874e5e435eca12affe7e40869ad54833d1814f18d1 python3.11-3.11.13-10.el9_8.tuxcare.els1.x86_64.rpm 0e70ca5f88ee7bfc71277800dfabee28e2f0e2bf5485cba4f768399758ca28d2 python3.11-debug-3.11.13-10.el9_8.tuxcare.els1.aarch64.rpm 87767dd49b982fe145cae989280202c09d68e965a27c76124b69fcafb9bf02b4 python3.11-debug-3.11.13-10.el9_8.tuxcare.els1.i686.rpm 3918e829e102604eedb1b821f599aeee41dc1532f257e5231e5f86ddcb9bdebd python3.11-debug-3.11.13-10.el9_8.tuxcare.els1.x86_64.rpm aa71e8d5a40c76dc6b9246795235d1268b30fc63a2cc8eea36b581cddb3054b2 python3.11-devel-3.11.13-10.el9_8.tuxcare.els1.aarch64.rpm 6478579f5616b6b66610e18f8fd3c6459e0c2168de4851812677c65944e0ee52 python3.11-devel-3.11.13-10.el9_8.tuxcare.els1.i686.rpm 2afbc7cf623b9cdbbd00663a816fa958386ba1fb082994ba86c2f38322337e82 python3.11-devel-3.11.13-10.el9_8.tuxcare.els1.x86_64.rpm 83d932b8bcefe00f6b6d143305e2323604e892e2ccf23de38f2e2ceecb96355b python3.11-idle-3.11.13-10.el9_8.tuxcare.els1.aarch64.rpm 42dda7a48183ae9d82a34d65e1bbcbea4d61947ebc09319210823e4e17c92bcf python3.11-idle-3.11.13-10.el9_8.tuxcare.els1.i686.rpm 9f272b234887e400edb526bf3dfa5473f6b10f26630c66cff5f727245677293d python3.11-idle-3.11.13-10.el9_8.tuxcare.els1.x86_64.rpm 4c6b8bd26e928301b7486b11adf92f5ebd8e7663a6343c6539043aa15e84e79e python3.11-libs-3.11.13-10.el9_8.tuxcare.els1.aarch64.rpm c394f4536f19204083cdb56be24b4864bde29a3059564b60546064a6ce35e41a python3.11-libs-3.11.13-10.el9_8.tuxcare.els1.i686.rpm 9ed8c6de153f301b1f224d14500e01065f8d400777e45a2c7525dc1477873318 python3.11-libs-3.11.13-10.el9_8.tuxcare.els1.x86_64.rpm 91db83722e1b2612943852a8cdbf27465a299ae72e9eb8f5a8a03831ac35898c python3.11-test-3.11.13-10.el9_8.tuxcare.els1.aarch64.rpm 0a556189d478336f2a8f5aea3ac39f417056a24456c5e0bb2405b99d5ac8edef python3.11-test-3.11.13-10.el9_8.tuxcare.els1.i686.rpm 5ff94c2820d59987fa080ba4e5c1bf483989ea316e373cfec96925a7d8bdcdd2 python3.11-test-3.11.13-10.el9_8.tuxcare.els1.x86_64.rpm 182b7c3bb66be3a91cbc6725b5d6957230c99b36f0af9837c6f78a0381eab77c python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els1.aarch64.rpm d6219fa97b94830417bea9dacb4e8ecfda50a3292c94e0dde19d4a023a07d67f python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els1.i686.rpm ef33a6624b8e16788be2a2515459236363ed7932cc1d5d74c7d73ba11122318c python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els1.x86_64.rpm 75cbbd1e38eb777eea97c3426e2d5f946f869f118edc499bdce17beb498707af CLSA-2026:1790639181 TuxCare License Agreement 0 - CVE-2025-24912: drop a pending RADIUS request from the retransmit list only after a handler has accepted the response, so an injected response with a matching identifier cannot cancel a legitimate pending request Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-24912: drop a pending RADIUS request from the retransmit list only after a handler has accepted the response, so an injected response with a matching identifier cannot cancel a legitimate pending request

0 tuxcare-almalinux9.8-esu hostapd-2.11-2.el9.tuxcare.els2.aarch64.rpm 5a982c5a320adeb232c77e82a25ed81856c286f56ee55b0b0bcdf2a46ac7af4d hostapd-2.11-2.el9.tuxcare.els2.i686.rpm e1ff6ade51824a071c7b3dec50ec7b2a8cec229c542ff2b029a1952c11b8af5e hostapd-2.11-2.el9.tuxcare.els2.x86_64.rpm 004238d5d9c20a7c6e084067d65f86aa74fd8a3aaf92b8fe00f874bbffc0d4e2 hostapd-logwatch-2.11-2.el9.tuxcare.els2.aarch64.rpm 366af942a89f018ee288bf09c4df7e101875f05c0f548d17233acbfcb0b6bf6d hostapd-logwatch-2.11-2.el9.tuxcare.els2.i686.rpm fb9d77e4297b404624054eb4008c467544a2051f3326974b89bae0f7db02c896 hostapd-logwatch-2.11-2.el9.tuxcare.els2.x86_64.rpm 8a118ccd30e40d41d9d7e7e8e5ca72f204fdef239640b0f75941a2812c90ff78 CLSA-2026:1790884160 TuxCare License Agreement 0 - CVE-2026-21637: uncaught exception from SNICallback in loadSNI() crashes the TLS server Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-21637: uncaught exception from SNICallback in loadSNI() crashes the TLS server

0 tuxcare-almalinux9.8-esu nodejs-16.20.2-8.el9_8.tuxcare.els20.aarch64.rpm 0bbcd9a315711cd01be2d804fc2e8647b9e20f1a24b801cb8d4215288500f474 nodejs-16.20.2-8.el9_8.tuxcare.els20.i686.rpm 72a373548e03eb88499431d61ea3c30ee9bcca044df5434c69eaac825d6a1030 nodejs-16.20.2-8.el9_8.tuxcare.els20.x86_64.rpm ff70c1aef751720e2019423e7a8b37ef8f6ba95dbf4b048cbfd09026cd82fc0c nodejs-devel-16.20.2-8.el9_8.tuxcare.els20.aarch64.rpm ff1e9de840c29b6f61e65e7a30888199ad068445691af0b51fc02fd2245cd6d8 nodejs-devel-16.20.2-8.el9_8.tuxcare.els20.i686.rpm b2a5d894361b2ce2d0cc7d29deb61c8044de829c28762309ec2018e15b367b2a nodejs-devel-16.20.2-8.el9_8.tuxcare.els20.x86_64.rpm 88003519584da6c028645e12400996d9f7e9e6669c9a715a32664b2b0959b71f nodejs-docs-16.20.2-8.el9_8.tuxcare.els20.noarch.rpm 734d051926d9ca6c75d6a5b8c130a7836872812082acb7178679d1d85b8094f8 nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els20.aarch64.rpm fb294cee47414d06bb629732ff0f8cb4ceb2ba4881bfa6909ec0d235f14b8310 nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els20.i686.rpm fd4a9c633657d31662208742132facde2b5433ef969f2b027d89046f7b1d5f99 nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els20.x86_64.rpm 703f5f1a02fc11961bef2921a2a165c436ddacaa3a81dd3c29ccea0f0d49a7f3 nodejs-libs-16.20.2-8.el9_8.tuxcare.els20.aarch64.rpm cbe1aa4f7269f45a387968bbfe036af98769543181fa8b8bf462485d7e4a6a84 nodejs-libs-16.20.2-8.el9_8.tuxcare.els20.i686.rpm 39cc74ee7d0cc31c6d44b4cd852ba4233f81d8d17d2597844f0e2f90bff1a928 nodejs-libs-16.20.2-8.el9_8.tuxcare.els20.x86_64.rpm ed8baf37dcd12abaa2ed228a901fd419015f9ff8948883702ea14ee15cf4da09 npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els20.aarch64.rpm 494f940ff6f2fbbf7c18475d18b986875f8027cb135c0a3f3b5d6f4465c44fa2 npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els20.i686.rpm cc9ae767365c85d7b0fb7d4d20ebcaa74604a64776e061b86ee93808bdd39d15 npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els20.x86_64.rpm 1aa8f6d27ce1b8143117c6df80d56585fd77855490ff8b485987f70a2f6afa92 v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els20.aarch64.rpm 5cdf2f21851ee9b56a9c8afe303594f20c82c096da065f51a0f1415d6fda9b5b v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els20.i686.rpm 01c482236b499ef1a3cbe905c2b2400f57abc939dd929a191836a5617e90f898 v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els20.x86_64.rpm dd8b03e6bb17f3de7588ce8206dd2f41151c3c679ae7bb4c094ebf425d099975 CLSA-2026:1791823571 TuxCare License Agreement 0 - CVE-2026-96807: symlink attack on the per-app .ld.so cache directory in regenerate_ld_cache() Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-96807: symlink attack on the per-app .ld.so cache directory in regenerate_ld_cache()

0 tuxcare-almalinux9.8-esu flatpak-1.12.9-4.el9_8.1.tuxcare.els3.aarch64.rpm 1f927cda4821823c65d816729938ea0010e81742c0bc659ed9bcd7ec716319a8 flatpak-1.12.9-4.el9_8.1.tuxcare.els3.i686.rpm 6643aa54d678cf4892745e5bf24fc40456149dedc44eec49f1a2a4d1a934377c flatpak-1.12.9-4.el9_8.1.tuxcare.els3.x86_64.rpm e9b6735ca0d8cbde1142e2d61ec7a4416b1dabd9bf04f37d78a59f83176619b3 flatpak-devel-1.12.9-4.el9_8.1.tuxcare.els3.aarch64.rpm b492a5c6b7bfa5952db94e510600e7b5162530e031a581b00f934cb56637bdf9 flatpak-devel-1.12.9-4.el9_8.1.tuxcare.els3.i686.rpm 595498f90261928fc0d123e8ba9db0bd61a8c31867cd7fdcfefcc75c8615ae06 flatpak-devel-1.12.9-4.el9_8.1.tuxcare.els3.x86_64.rpm 07435acfd4e8179b23455bf32b878b471e2130bba5aab294f2d24596571d5b53 flatpak-libs-1.12.9-4.el9_8.1.tuxcare.els3.aarch64.rpm 9e1e18528c479cbef91f38b87b72c272899da8483cf9d263e9d983467492f495 flatpak-libs-1.12.9-4.el9_8.1.tuxcare.els3.i686.rpm aadb2a994ba061e6a0864412bec289481f43053413f12b1cf3d7d6d547a5b512 flatpak-libs-1.12.9-4.el9_8.1.tuxcare.els3.x86_64.rpm 8ffe71fb3a9c9f61292d935934678da73730c456a045f875418794a9adfebbc6 flatpak-selinux-1.12.9-4.el9_8.1.tuxcare.els3.noarch.rpm 8996340d8d4b746c61f9e6c9d7b2643e4a392c1c2aa401c984f89c623c8e53cf flatpak-session-helper-1.12.9-4.el9_8.1.tuxcare.els3.aarch64.rpm b45972f235f0699b47c28296bb1b521136a8dfbaf05b19af6ecb7c922bf0b232 flatpak-session-helper-1.12.9-4.el9_8.1.tuxcare.els3.i686.rpm 3e5b9cbcdcc3fbda80e87d183451c5ff1ad5e93f5dab59805b96b5cd5c9f750e flatpak-session-helper-1.12.9-4.el9_8.1.tuxcare.els3.x86_64.rpm 2f81ea66793151167d10fae4eb1d3e18676c86ff1c8fe1478f42c2c5c5ab80fb flatpak-tests-1.12.9-4.el9_8.1.tuxcare.els3.aarch64.rpm f3d50ab668568a0e2a4e38f0c0f80e2926665ecb17d70cec91b2fbdeb19b1dc8 flatpak-tests-1.12.9-4.el9_8.1.tuxcare.els3.i686.rpm ad626477d863304512b3ed342d9eeeb6a89142b353fc02fa63eb4e29f8acece1 flatpak-tests-1.12.9-4.el9_8.1.tuxcare.els3.x86_64.rpm 641d80bbfb95503295ee3a79840d54fcb3eef0a0f0caf96f145d946583a0de47 CLSA-2026:1791824382 TuxCare License Agreement 0 - CVE-2025-1218: fix packet over-reads in the mysqlnd wire protocol parser (GHSA-r6x9-5r99-36j7); reset row zvals released on a row decode error to avoid a use-after-free (downstream correction) - CVE-2025-14181: fix heap buffer overflow from signed overflow in the SOAP HTTP chunked response size check (GHSA-cj93-vc83-wgqv) - CVE-2026-91765: bound recursion depth in ext/soap XML parsing and decoding (GHSA-rgrp-mwpx-f6rm) - CVE-2026-6103: fix phar tar entry injection via overflowing TAR size field (GHSA-j3wh-g957-2m85) - CVE-2026-92842: fix heap out-of-bounds read in convert.* stream filters with a NUL byte in line-break-chars (GHSA-88hq-2827-7pg6) - CVE-2026-91769: do not fall back to the certificate CN when it presents a subjectAltName service identity (GHSA-vvx9-73fr-5jjx) - CVE-2026-91767: fix out-of-bounds read in php_openssl_matches_wildcard_name() (GHSA-xr7j-rvgx-xq5p) - CVE-2026-91766: strip Authorization, Cookie and Proxy-Authorization user headers on cross-origin redirects in the http wrapper (GHSA-fpwc-w8rq-cr92) - CVE-2026-93682: fix out-of-bounds read on an empty Location header in the http wrapper redirect (GH-23467) - CVE-2026-91768: compare all 128 bits of IPv6 addresses against FastCGI listen.allowed_clients (GHSA-62xp-839h-2637) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1218: fix packet over-reads in the mysqlnd wire protocol parser (GHSA-r6x9-5r99-36j7); reset row zvals released on a row decode error to avoid a use-after-free (downstream correction) - CVE-2025-14181: fix heap buffer overflow from signed overflow in the SOAP HTTP chunked response size check (GHSA-cj93-vc83-wgqv) - CVE-2026-91765: bound recursion depth in ext/soap XML parsing and decoding (GHSA-rgrp-mwpx-f6rm) - CVE-2026-6103: fix phar tar entry injection via overflowing TAR size field (GHSA-j3wh-g957-2m85) - CVE-2026-92842: fix heap out-of-bounds read in convert.* stream filters with a NUL byte in line-break-chars (GHSA-88hq-2827-7pg6) - CVE-2026-91769: do not fall back to the certificate CN when it presents a subjectAltName service identity (GHSA-vvx9-73fr-5jjx) - CVE-2026-91767: fix out-of-bounds read in php_openssl_matches_wildcard_name() (GHSA-xr7j-rvgx-xq5p) - CVE-2026-91766: strip Authorization, Cookie and Proxy-Authorization user headers on cross-origin redirects in the http wrapper (GHSA-fpwc-w8rq-cr92) - CVE-2026-93682: fix out-of-bounds read on an empty Location header in the http wrapper redirect (GH-23467) - CVE-2026-91768: compare all 128 bits of IPv6 addresses against FastCGI listen.allowed_clients (GHSA-62xp-839h-2637)

0 tuxcare-almalinux9.8-esu php-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm ac42d9caa4ba4676fbd3315c1c13887f01cb1ce58f7732a7f3112c3da1a0e43f php-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 25648c38fff01699dd57374f131a7a51a87501767c1cd0f260fa8a306de4161b php-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm edb24c8f25823f12f3ee97223a703c2ca8cda7ad7bb0e8ebb2539793b8401c50 php-bcmath-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm a9bd43be3f15504b528727f5e14ea1f9971c1b07fdcdea99c82cb88ffb48d30b php-bcmath-8.0.30-8.el9_8.tuxcare.els3.i686.rpm b4012e16d4ec400115a50548db80ece57ca25ead4ec22fa59f104c35a4c352d4 php-bcmath-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm c6b0466719b2787663bdb1ed66986528a58b4696fafa5e320657103cba1a113d php-cli-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 9882acab5420d6a65023899efaa3fefc2b1bf551c7ae83f65a11a2b083304b44 php-cli-8.0.30-8.el9_8.tuxcare.els3.i686.rpm c17723a9da95eb1a80accc8bf633969a194b98723f096549db4dd3db19db9669 php-cli-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 6b19c2b5911237c80a1ed0a7c0c56d0dff3fa83cb2af913db67f11f1409f473b php-common-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 2e02d3255790ffc1f12e823800444eef0a5d2ddb90f001708c76d931a561331f php-common-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 4a5824e8e77a20982e53a176eee150a5f8c3ee468f5a17e738db154eea77e645 php-common-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 1948eb0d3dd21bc5f82ed2a3cebf7719037774b439442590c59481c66b5670c8 php-dba-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 9f19d5bbc4e0a587bc66a47c9dea5ac6ebcb2b91faf38e583391ceebdccd3a99 php-dba-8.0.30-8.el9_8.tuxcare.els3.i686.rpm fc56bec5b1538aa6ac392a82cb9294ba56dbdfe345047f92602b31732be72823 php-dba-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 9142e52979813f17c5bd00d74671e416bec4769b78e26edb5fa3fcbe532bc581 php-dbg-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 8f3c9d9e738fc0f30ef271838005ece12859238dbf773ef93201cfb35f1158d3 php-dbg-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 1a05e3abce123d796506ea709cd6d2c3797e0fcf7ffd07b4ad4a89471fbf4dff php-dbg-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 65bac1d205129b0a701d11e0adc622ddeaefef74013b1fbee8c85e4b8f6967f5 php-devel-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm eec1843993e8336feaf7bb9f0ddfb0d583384d9037f819e3a4c9102a26a09e21 php-devel-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 0b0ea7dacd70e9bc847e19ec22fdc994bc696c142bc44eed675218fd46b9c115 php-devel-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 172744287f8ea735bc115eabe5d7982c4615c9713f36d2c004b624691d787d0a php-embedded-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 13ea22974a7f619b1c379fb363aa78411fdb4ba334619df999935f3c554b6328 php-embedded-8.0.30-8.el9_8.tuxcare.els3.i686.rpm ed7a415db342bb0d05775e4b278d466a9e1601765b86ec3a24bddca081ff4934 php-embedded-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm c4fe18be12786bfc094f02f3e7bc46df18805d19ce1304947e12ffbdc70df3be php-enchant-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm f4a63042c708bcbdeed190f319e9a35ed6c6e68e6990d13e1ffb5b7c688fcbc1 php-enchant-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 7b76fc170e0d33081bbf8011e8ff86161f21d1c5273c256c246d2289c06c90c8 php-enchant-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 4ccab6be25869c776f9bc1e3755bf3ce176fcd5a28913fa009ea584923570cf9 php-ffi-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 0cc2ad68e9f776657adcbb865b45c85f9a6681cf5c14a4146b5bf3a1179fa6b5 php-ffi-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 79aa6c4dae8c59b3e55b6b4f4bcc61d462aa53fee911106c779e170311927003 php-ffi-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 2240fc5918820caf003df1488009d235287df54c92ffeb9e9fc13ae3fc95e3ca php-fpm-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 84b75b1b886d598f1fcc59673b125648b6bf7e1af579522b24bc285db0fc5c42 php-fpm-8.0.30-8.el9_8.tuxcare.els3.i686.rpm b960912a2b6a2a07fc429838b020b954fc10b171069297f766f0eb7e89a0d567 php-fpm-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm a7b17e88afc4a77448e9a41aa743529164e9e664242659ce033ce6023ce3e084 php-gd-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 630ce3c5920e625067d07777117f7b9350531aa70ecd8f132cd17f17763d7ff0 php-gd-8.0.30-8.el9_8.tuxcare.els3.i686.rpm a67f65413447c467a041618cb70f45944cdb191641f296df8cacdabf9c383ad9 php-gd-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm e4deab38b1d1f53707f48dea3ad6b04a62f7137c6a3ec4cfa97b794334e14ff8 php-gmp-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm b7854b5b6604fcb43244dfbd6572d2c87cfa73d6d89b45fa6e13e96699eed743 php-gmp-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 395e06e85fa19c008005b7be058b9073365f7e3043eb685ca02bef9cd41cc802 php-gmp-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 4097cec04c0c67a50037dd71a639eb3f03bbe49c7deaf7b55bc926efa7545642 php-intl-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 6e40b545a292e8a66854bed3d2ce5f38bdb03d4f40566a8a483f7d21e5a70fb1 php-intl-8.0.30-8.el9_8.tuxcare.els3.i686.rpm a2999f8942e6d482a83537795b0124df0508368ae23ac1c8b0e625888a8765b3 php-intl-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm e24c6e991ed217faa692ac6abf2c6dff5eb45634618e69050860d11bd9a1f7f3 php-ldap-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 7ee61ef6a2eab2ad523ce58fcef96b1059946da5f5af4a06ad0cc1bec7beac79 php-ldap-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 88f24b1f572888f993bfb261653d1bd4f59c6d9647e493e0a74c24d4d46dc910 php-ldap-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 5e3c49ab36f31e1aa1fe8967fcd0285934bd2ebb6d4137034e472253973e9dcd php-mbstring-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 54918a1944c2d682868aa350f7540e65823c9ef0bdd6716a994dee886c28838b php-mbstring-8.0.30-8.el9_8.tuxcare.els3.i686.rpm ce4ff916a34f165cf593e65126522674aecb87171785ff20a99f6f680d3bfa74 php-mbstring-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm e47eac50e6bb9bc0efe039caae07a8cd6aafd90f5884ddd77f8126e146316fdf php-mysqlnd-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm a6a06269ef3a59a885da7bf34a07f513fd83aec6ec8a0e00571a064e94d007ce php-mysqlnd-8.0.30-8.el9_8.tuxcare.els3.i686.rpm e10e97b9b48b1091dc3606b6944fe3980ea664ab90a55bf69012d5e34ce3484d php-mysqlnd-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm becd2f0e3f45e50f8003012f928f2148c9315ac31b20acb27e9d7f4c601eb23d php-odbc-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm fec6abc933382682942b7c9674391f588ec4662f8f1f52790f1041b3f5fc3cb1 php-odbc-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 728673105e292959e598f3f2fd2d1e300797ee9337bd856d2066017bbc8b8e1d php-odbc-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 2ac5c3ffeea4f4f503da42f9efb184137f8f36b615eeeab23fbfdad26b2661e1 php-opcache-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 393f61441a87897aeb966d6418ee2757929012704468a33fe16e8a9cb701ad8a php-opcache-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 4598477ca69d967ffaaee0302468204f66ee3a8a5b96206709f1699527ae3229 php-opcache-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 0ad6e30ce89c8e14bfd7964ee90ddcc93300aebc964496d4cedb63e1680dcbdf php-pdo-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm d1f21d7ca5efdcb451c7658a807859b2633a554c7b7114dff10082beafc8c7ef php-pdo-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 989137f2130f0b89f599ca766cd91aba5db228b5473ab95a6926785914295d48 php-pdo-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm c447ae8d866b7ed73404726107fa018b54a7facb4fe958d82d7688db194c41e5 php-pgsql-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm f97052c60b13800070b2bd9597f6bc79c6c3c475adce9bdc11d235b5c4508b87 php-pgsql-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 4257b9dbca6f6ce2bb059a6b104c20a6be48b1ca1342b083c16489e6260be23b php-pgsql-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 4504db468cbb46194e3161ffd1cc248880a5ed459aad00126aa952be5af9a2d0 php-process-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 5701ca2c610c4d8a254c6e8aeb1d35499bf1b7fedaacdac095dfa61bd4cbef91 php-process-8.0.30-8.el9_8.tuxcare.els3.i686.rpm b1b91ca752c3f459d87a23c780c130fc262c0b92e8ff283fbeb52e253339a002 php-process-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 99134f333fbeb0e561c63f9fa4863c04ac12c936056340bfd4881b55ecb930cc php-snmp-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 40fe7a445dd8c2e3c00ac3eaee974c8588162fb11eabe8c58e47f170751e82a3 php-snmp-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 9f715138570cbcd163fb1ddd28dd6f1a755deef3a5c93b0f67f3248b76793781 php-snmp-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 6c3d44295054c6f0c1924884898443fd5e237f14c43d9dc353ec1bc3fbd4e486 php-soap-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 80f544189009bb59011571c7dd266296a37359472fa53017b1c283fb97d0256e php-soap-8.0.30-8.el9_8.tuxcare.els3.i686.rpm beae9d0eccc0f7bd12d2ef8676830cdafe6a8547634fc3ea95fea45214c4e499 php-soap-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm e9899433b85a0900c6c5d0e4b22b52001d173ad3b662e39a73640b6c7c43c92a php-xml-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm 884832716e62d01e02696d17526098f46f1499fd2e1b2239f09230e0611724d5 php-xml-8.0.30-8.el9_8.tuxcare.els3.i686.rpm 42ed69534ea2ed0dceea38818f3cbc826d0b198f3f2727442ed8408da700025a php-xml-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm 2fe5b2c953019c25fb3698fb27fdd72ffc1970bfe5e336ab3a02cb4d7d3792dc CLSA-2026:1791829330 TuxCare License Agreement 0 - CVE-2024-43204: mod_headers: RequestHeader no longer changes the response Content-Type; "Header set" and "Header setifempty" of Content-Type no longer mark it as trusted - CVE-2026-33523: reject control characters in the reason phrase of forwarded status lines, including interim responses - CVE-2026-59797: mod_ssl: do not allow file() and filesize() in SSLRequire expressions from .htaccess files - CVE-2026-79768: mod_userdir: reject "." as a user name so that "/~./" no longer maps onto the base directory of an absolute UserDir - Also ships the els4 fixes: CVE-2026-63045, CVE-2026-29170, CVE-2026-42528, CVE-2026-93546, CVE-2026-58415 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-43204: mod_headers: RequestHeader no longer changes the response Content-Type; "Header set" and "Header setifempty" of Content-Type no longer mark it as trusted - CVE-2026-33523: reject control characters in the reason phrase of forwarded status lines, including interim responses - CVE-2026-59797: mod_ssl: do not allow file() and filesize() in SSLRequire expressions from .htaccess files - CVE-2026-79768: mod_userdir: reject "." as a user name so that "/~./" no longer maps onto the base directory of an absolute UserDir - Also ships the els4 fixes: CVE-2026-63045, CVE-2026-29170, CVE-2026-42528, CVE-2026-93546, CVE-2026-58415

0 tuxcare-almalinux9.8-esu httpd-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm 1ca74ad2e060a98f98f2f017b265789ba57939da7add9fcc381e430955af675d httpd-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm 25ab4c105293cb0d66006db8f9ef82798de84eca5489ce778e66fa62e803981f httpd-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm 3e75f650849c0b7f3df39fd13cfad4d55b0eafef0af335751b6632ee26e92216 httpd-core-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm c2ca2744b530edb1f5ce6b389dac021e80baf244e42be8cac894314fb8336c8e httpd-core-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm 897c99bbfa41f54d46e590a5c3b102f46ed53ec4dd8be58624eae9bc13516c84 httpd-core-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm bc7bb516f9686676eda2797b8170fdbea6c56a8ff25585bba7433671a0d1ae97 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm c3be9f0557ff8a06f7c5a5ad041452337bd71877dd686d7b294be856743b7002 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm b5be866a86820ceec4c227817ea55555b8c583ece063d7181eae5cbc9383593d httpd-devel-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm 587d8e7a9b7eb8f129efbcc123f3b797a23f693540e85a6f3f89fe53e7b2a72a httpd-filesystem-2.4.62-13.el9_8.6.tuxcare.els5.noarch.rpm eebe92e2b4a228352b8178d26f09a5206b6755cd08ccd1b4fe0019dc4ceefedc httpd-manual-2.4.62-13.el9_8.6.tuxcare.els5.noarch.rpm 82032b3f81b9bce247f6f0ce795aa3dbd4e4cb59dba086118ccaadfd6de45f8b httpd-tools-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm 467fce1b7ab4ac2c07852afbe9a0c8930ff0fea0e0f1843b4823d755e9e3338d httpd-tools-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm 4df0f9b6ab7222d698fcdf6896ecff5376324fe006e8fc9c2bebb368014011f9 httpd-tools-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm 22658dd4db20377a2cc718f092335653317a3f883cc05900a43a279b3beedfcd mod_ldap-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm 0b06edfd86420a02c6cd6ee09704f60d246e9e8f40e250abb8bc12eed77072c7 mod_ldap-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm 5281b090d148b2778d2c3eb4e5961387bebcaf976035a61634324a7765649304 mod_ldap-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm aa9d18c276bb03a1a819f4c00a28c9a30fa0dc6d8e0fdffd6a6363df1cc2e310 mod_lua-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm 9e95d4c84354ab5f53afb3adcd8b8f65aaee37ec070f345efe0c589a4cc42a55 mod_lua-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm 291890af4339a3a1e075a118f0d1583677228d2c7a94ed8154282cc00bfb2e64 mod_lua-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm 45c09de93c88dcea2611bc7a51b05a3c7812355c18f0a22b24b35673645b730a mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm 3e41f3b356f73749232b42cb37d0aac5ba711f4e01e04e919a7e657d8ec258d0 mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm c5ffe189ae03a692540ddf0c5dbc1bfcb321faea6501a641c48734c918a93d66 mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm cf1bcc5b618f00717f803a876718a33fb9a8adbb5b7c01c342d70c0b9f1c273e mod_session-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm c2de47ea2472dc07ff6d704cf3c2fd4d5a881ced9099b4188550867f2b86b111 mod_session-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm 3ce0129b57d9d522aa5190e427110c4c3ab1f0f7f0f4f24adb3a6d8be9d0e4e8 mod_session-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm c016124c3de8296c9ff885d9af75dc5220a970aaf7c5ac7432bee57fd01bc2c6 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els5.aarch64.rpm a38dcfef86df57e3578b78f2f36478c33cff47c905a52edc5d60b13d7130b719 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els5.i686.rpm eb55e7593769636924acb671fb7350f72848fc1b4f97fe6ec3b106cc18a0cad0 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els5.x86_64.rpm 1432e21693ee10ae2ca118c32966aecfe8d56bcd66bff7cc551fc3ffa15dc2f5 CLSA-2026:1791829682 TuxCare License Agreement 0 - CVE-2026-2369: fix integer underflow in sniff_unknown() on a zero-length resource Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2369: fix integer underflow in sniff_unknown() on a zero-length resource

0 tuxcare-almalinux9.8-esu libsoup-2.72.0-16.el9_8.3.tuxcare.els4.aarch64.rpm 19756cfb05017791b02db4180a92581fc72c314d9b745260411e30a65f3e9e09 libsoup-2.72.0-16.el9_8.3.tuxcare.els4.i686.rpm 588bc50b110f1877e85f234a7433b6c50c24ef876961f99a73d183740c1f81b9 libsoup-2.72.0-16.el9_8.3.tuxcare.els4.x86_64.rpm dbcf3cba91fd90b8aaac973a9593fe374850a46969e99183426825e6c71f8ddd libsoup-devel-2.72.0-16.el9_8.3.tuxcare.els4.aarch64.rpm e7be4984d4965c21555750a56f0efd58170db6a1d6dbc28a0fd23c5af1406a03 libsoup-devel-2.72.0-16.el9_8.3.tuxcare.els4.i686.rpm dba4ed23662c13cda29372a026ac3004c400c3d58aea2842794fa63e07698bfc libsoup-devel-2.72.0-16.el9_8.3.tuxcare.els4.x86_64.rpm 8c6cc55f149385a7ba6dc04094482d8df6d70fb1c55b8a998bba2eb36e162b1c libsoup-doc-2.72.0-16.el9_8.3.tuxcare.els4.noarch.rpm 02d2957dfc5a77bbe418f7a1dbfce3da4befcc2a1dc03c1ba361da5b528fb95a CLSA-2026:1791830321 TuxCare License Agreement 0 - CVE-2026-65182: ensure the security constraint with the longest matching path is selected (upstream tomcat 9.0.121) - CVE-2026-65183: improve the security of Unix domain sockets in the NIO and APR connectors (upstream tomcat 9.0.121 and 9.0.123) - CVE-2026-65905: fix incorrect rejection at the upper boundary of the DIGEST nonceCount window (upstream tomcat 9.0.121) - CVE-2026-65927: correct the rule index reset for [N], chain rule and query string processing in the rewrite valve (upstream tomcat 9.0.121) - CVE-2026-66422: separate the Context role mapping from security-role-ref (upstream tomcat 9.0.121) - CVE-2026-68525: refresh the security constraints after FORM authentication when the restored request changes the HTTP method, so a constraint that limits POST but not GET is re-evaluated instead of being bypassed (upstream tomcat 9.0.121) - CVE-2026-68569: various improvements to the DataSourceRealm and JDBCRealm (upstream tomcat 9.0.121, plus 45a3c1ef from the 9.0.x branch for a DataSourceRealm without a role store); a JDBCRealm in the default strict allRolesMode now needs a role store - CVE-2026-68763: return the unused HTTP/2 connection window allocation and drop the stream from the backlog when a stream is replaced after a reset, and keep backLogSize consistent, preventing a flow control allocation leak (upstream tomcat 9.0.121) - CVE-2026-73180: track the WebSocket sessions of an authenticated HTTP session by a key held in a session attribute rather than the live session id, so they are still closed when the HTTP session ends after its id has changed (upstream tomcat 9.0.121) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-65182: ensure the security constraint with the longest matching path is selected (upstream tomcat 9.0.121) - CVE-2026-65183: improve the security of Unix domain sockets in the NIO and APR connectors (upstream tomcat 9.0.121 and 9.0.123) - CVE-2026-65905: fix incorrect rejection at the upper boundary of the DIGEST nonceCount window (upstream tomcat 9.0.121) - CVE-2026-65927: correct the rule index reset for [N], chain rule and query string processing in the rewrite valve (upstream tomcat 9.0.121) - CVE-2026-66422: separate the Context role mapping from security-role-ref (upstream tomcat 9.0.121) - CVE-2026-68525: refresh the security constraints after FORM authentication when the restored request changes the HTTP method, so a constraint that limits POST but not GET is re-evaluated instead of being bypassed (upstream tomcat 9.0.121) - CVE-2026-68569: various improvements to the DataSourceRealm and JDBCRealm (upstream tomcat 9.0.121, plus 45a3c1ef from the 9.0.x branch for a DataSourceRealm without a role store); a JDBCRealm in the default strict allRolesMode now needs a role store - CVE-2026-68763: return the unused HTTP/2 connection window allocation and drop the stream from the backlog when a stream is replaced after a reset, and keep backLogSize consistent, preventing a flow control allocation leak (upstream tomcat 9.0.121) - CVE-2026-73180: track the WebSocket sessions of an authenticated HTTP session by a key held in a session attribute rather than the live session id, so they are still closed when the HTTP session ends after its id has changed (upstream tomcat 9.0.121)

0 tuxcare-almalinux9.8-esu tomcat-9.0.120-2.el9_8.tuxcare.els1.noarch.rpm 70a8bced509165b60701b3165a67a488573bb9b1d8e6b516556b06846465e56f tomcat-admin-webapps-9.0.120-2.el9_8.tuxcare.els1.noarch.rpm ad38322734f5c3fee99901b69ba9b0df812c352cbb30737ef2dfecea191e9cc0 tomcat-docs-webapp-9.0.120-2.el9_8.tuxcare.els1.noarch.rpm 1947278f2cfb9a931461fcdd6eb61b52e10bb490a5026900dfa910d35b8d9e55 tomcat-el-3.0-api-9.0.120-2.el9_8.tuxcare.els1.noarch.rpm bb30f64c694d09f76708bcd9eb72a8891af7916c098b9077f66e485acf2d87d1 tomcat-jsp-2.3-api-9.0.120-2.el9_8.tuxcare.els1.noarch.rpm 4d7a4d8456544defa556a5710ba6d0c4a953d0c825282383ed59cfef8d7a84cd tomcat-lib-9.0.120-2.el9_8.tuxcare.els1.noarch.rpm 605494596b5afa7731e5ac630501a9c9d7de38ffc6e81e07c82be7789bedae89 tomcat-servlet-4.0-api-9.0.120-2.el9_8.tuxcare.els1.noarch.rpm 469ea0d5f39f6fd66a725cbcf133d1cd708b8710e56fa89371baaa0f386ff89e tomcat-webapps-9.0.120-2.el9_8.tuxcare.els1.noarch.rpm 5ee19f5e47b4214f1967c0099e34f75cbca4e1b4d5cc9666ef6909b83ecaaee9 CLSA-2026:1791869118 TuxCare License Agreement 0 - CVE-2026-107885: Don't allow clients to hold a job open longer than the multiple-operation-time-out value Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-107885: Don't allow clients to hold a job open longer than the multiple-operation-time-out value

0 tuxcare-almalinux9.8-esu cups-2.3.3op2-39.el9_8.tuxcare.els2.aarch64.rpm 825257e14c2ea8a52dabed7b852456e5aa62eaf8c0d3dc2265de7365f382aaed cups-2.3.3op2-39.el9_8.tuxcare.els2.i686.rpm 60fbfe21aa625bd6fd6e5dfe49b3a7a49db3b46c09fc2ebe2e344d5eec17ddab cups-2.3.3op2-39.el9_8.tuxcare.els2.x86_64.rpm 50fed8a161ca11004133f2c73a4f395737212e8c9925aeb0d0d6fabff2acecc6 cups-client-2.3.3op2-39.el9_8.tuxcare.els2.aarch64.rpm f616e23a7f22af32ffe2e28c11f2adc6eef487561073a68319dce5bc08ce471b cups-client-2.3.3op2-39.el9_8.tuxcare.els2.i686.rpm 21abf0ce85849adbd4a083ae3fb236ccd2f6b09ff0a59b513fd5958315e252b1 cups-client-2.3.3op2-39.el9_8.tuxcare.els2.x86_64.rpm 83763077cf9e9e5b08eb8c011fb24429f7c2fc1e4c0305d3bb0fc758b2474342 cups-devel-2.3.3op2-39.el9_8.tuxcare.els2.aarch64.rpm ce8518046ea9e940c6fef6b2fca3ef45843a37728cdae78d9fc3d55f1e86fcff cups-devel-2.3.3op2-39.el9_8.tuxcare.els2.i686.rpm aa24e037c1d1be1c3ef640437a9445528ef244dc9df9c4c7daccf6c148fd34cf cups-devel-2.3.3op2-39.el9_8.tuxcare.els2.x86_64.rpm 4c72768a68b986650c1eb052ccb9cbaaa11cf8d5f65b681a0a0fe27f20ac6d61 cups-filesystem-2.3.3op2-39.el9_8.tuxcare.els2.noarch.rpm eb4968ae0a44c5fdcf72a47ecdf8510c587160768908378894777df7ca3a080d cups-ipptool-2.3.3op2-39.el9_8.tuxcare.els2.aarch64.rpm f7212e29522693af3aa2421d0eceec26a9e0131951806e2a25d4673ce3c392f6 cups-ipptool-2.3.3op2-39.el9_8.tuxcare.els2.i686.rpm 7298ccf814a8a6a2a40c5fe151963d5beaf43e5903e9d489bd898aa8925d276d cups-ipptool-2.3.3op2-39.el9_8.tuxcare.els2.x86_64.rpm aea24542538f64d4820d540b894057bb3f5d776051f676ab8bf544b985351728 cups-libs-2.3.3op2-39.el9_8.tuxcare.els2.aarch64.rpm 92b7bb6073d9bd37c866a868c17dc43aededaf565f63dd0850f08a6b03612f6c cups-libs-2.3.3op2-39.el9_8.tuxcare.els2.i686.rpm 85afded099b379f5a5f521581158e2ee08dbf7ad47b879bea1e6cbbd4f9df7dc cups-libs-2.3.3op2-39.el9_8.tuxcare.els2.x86_64.rpm 3158b81a51f5c24a60d3aa1d51cfb83bf3dbbf789fab0210af613e28b8ddf1ed cups-lpd-2.3.3op2-39.el9_8.tuxcare.els2.aarch64.rpm 37f9cd4e2b1202e4e987c572d79ea689a5207a8f328590347ebd1808b5b52a4c cups-lpd-2.3.3op2-39.el9_8.tuxcare.els2.i686.rpm d717bf7f5cabcd8a9d8b286d870b39ec3824ac1e7fb721c307ee86d258d8cd8e cups-lpd-2.3.3op2-39.el9_8.tuxcare.els2.x86_64.rpm 2cc1108eea95918837c7ffb06e26ce6f066bd8fa59516a9fc635040771031a4b cups-printerapp-2.3.3op2-39.el9_8.tuxcare.els2.aarch64.rpm 552cf28c5a14d793530814c20e38be63523b5ed11ddbe10dc1d754369485a7ee cups-printerapp-2.3.3op2-39.el9_8.tuxcare.els2.i686.rpm 028890806673ffe08f3a0406571cb892038cc61d76a6297ec298ba2dd75495a4 cups-printerapp-2.3.3op2-39.el9_8.tuxcare.els2.x86_64.rpm f301c087e68154b16804bb866ccd857ff115c6d7ee0f4b65ded01b345036db28 CLSA-2026:1791886936 TuxCare License Agreement 0 - CVE-2025-59031: remove the unsafe decode2text.sh attachment conversion script Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-59031: remove the unsafe decode2text.sh attachment conversion script

0 tuxcare-almalinux9.8-esu dovecot-2.3.16-18.el9_8.1.tuxcare.els1.aarch64.rpm 00058d012cbb9cfa9a6aee8ab9992a6bed2b29538645a59fe755c772f471b5c5 dovecot-2.3.16-18.el9_8.1.tuxcare.els1.i686.rpm 890955cd2fa6b39a61c5cd1b834b32160fbb3c7d37eed7c38804db559de6775b dovecot-2.3.16-18.el9_8.1.tuxcare.els1.x86_64.rpm 202b5289c245563eee13ee808c75081b11faa10d3885d695ef945d62f2a41fa6 dovecot-devel-2.3.16-18.el9_8.1.tuxcare.els1.aarch64.rpm b6900388b96948b42a16ed6c88124665c4be7c301319bc911b4b554d72a8fe86 dovecot-devel-2.3.16-18.el9_8.1.tuxcare.els1.i686.rpm 71940f3f2618bc07b7b7b7be4695bf7e77cc060fe3a59faa3f25e4fd25707a54 dovecot-devel-2.3.16-18.el9_8.1.tuxcare.els1.x86_64.rpm 9e273cee1b976685210f208710a4bc8e3c73262cb5a49453bccf0bc564dbd306 dovecot-mysql-2.3.16-18.el9_8.1.tuxcare.els1.aarch64.rpm 960ea7982642cc01aa943c1ab1db29a906e8b6293d8e743c24530e79da1f8512 dovecot-mysql-2.3.16-18.el9_8.1.tuxcare.els1.i686.rpm c3baf80c50fc40563b9f04aadf9600514770095f97f80b66c9a8eaecd70bea0c dovecot-mysql-2.3.16-18.el9_8.1.tuxcare.els1.x86_64.rpm ab2e4c5c91bd59536135b34431b1a88a48a1e7c836284fbdf43d59513623322f dovecot-pgsql-2.3.16-18.el9_8.1.tuxcare.els1.aarch64.rpm 5a140a948141efb25850bff119f5627872a2fc67f6889ccfe785e776b8a41e3d dovecot-pgsql-2.3.16-18.el9_8.1.tuxcare.els1.i686.rpm 54a52adab32671e106d5983e8f49e2b3ef499c6e0bf7327752b2435ca95b0ab1 dovecot-pgsql-2.3.16-18.el9_8.1.tuxcare.els1.x86_64.rpm 8bd920d14e46de0fe1b46bf6f0d3124e3f1a8c4463412dc8f5763f395883af10 dovecot-pigeonhole-2.3.16-18.el9_8.1.tuxcare.els1.aarch64.rpm 24a42dec2484c37da22675c8f0a4cd4a5f4ea9fa5dff0ae3a84de635e7c92e96 dovecot-pigeonhole-2.3.16-18.el9_8.1.tuxcare.els1.i686.rpm 2519c89a81f78568fd910c4ae049a41f5af8fd0cc275bd1a610240b11b229c76 dovecot-pigeonhole-2.3.16-18.el9_8.1.tuxcare.els1.x86_64.rpm f0d3025b464e451570c9860586f9cac06d023b08cf105d5185ea270feb35ce77 CLSA-2026:1791891680 TuxCare License Agreement 0 - CVE-2026-9496: strip the committish in addGitSha() of the bundled npm pacote copy with indexOf/slice instead of a backtracking regular expression, so a crafted git spec can no longer consume excessive CPU Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-9496: strip the committish in addGitSha() of the bundled npm pacote copy with indexOf/slice instead of a backtracking regular expression, so a crafted git spec can no longer consume excessive CPU

0 tuxcare-almalinux9.8-esu nodejs-16.20.2-8.el9_8.tuxcare.els22.aarch64.rpm 20e22bc14ac786e7e89e6e46e3d418a4fa5fcd192607a7d1f25d1a6875ea9294 nodejs-16.20.2-8.el9_8.tuxcare.els22.i686.rpm 7ff1842be2645119876716351d66d0a3a547597c4813aae59b4af9f75ba7005a nodejs-16.20.2-8.el9_8.tuxcare.els22.x86_64.rpm 42bac27060c61839810dffa37423bfbb3c7079e66ab456be862b41ff88939ec9 nodejs-devel-16.20.2-8.el9_8.tuxcare.els22.aarch64.rpm d4e686d851f4bfb85a5af85e01e91dafe1b3560ed21db0525ea36eac490a8bb0 nodejs-devel-16.20.2-8.el9_8.tuxcare.els22.i686.rpm df957538432ea714cec672d3b94d5f258b8051fb17a6820056493c1743ed063e nodejs-devel-16.20.2-8.el9_8.tuxcare.els22.x86_64.rpm 64587fef44c6038b756f7cdad93f63ecd456a7126b32fec35dd655a70ac075cd nodejs-docs-16.20.2-8.el9_8.tuxcare.els22.noarch.rpm 0e960c427893ccadf0379ae2c27303ff48832c00464f0ae85cdb0f2dd64b3cdd nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els22.aarch64.rpm deaf3dc5e83bafcf5968d3f61ea862f6a543e3f5bab93a5b4cb2212fac5cc8e2 nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els22.i686.rpm eb7580949dba9eef49a5c45b65163785e345e7ef75e9d10aa75a371524089047 nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els22.x86_64.rpm 10f0c44db71ec531d4a7b64f651d6bba0f31b0b44a74fa846df058600bc43718 nodejs-libs-16.20.2-8.el9_8.tuxcare.els22.aarch64.rpm 7f4d52e477ed6706e250a29b767aabac1ca30d30b6b531757835e74068483aaf nodejs-libs-16.20.2-8.el9_8.tuxcare.els22.i686.rpm 3c9abf7db210d9f3282ca0bd7c49336ebca850345efb9b1594970554801e2170 nodejs-libs-16.20.2-8.el9_8.tuxcare.els22.x86_64.rpm 875e36bba694fa40b042a316edb06d4da371710eef53d4718246097de91cd91c npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els22.aarch64.rpm 86a1836c92cef882892b1bd1447220966b8c1d951fe1cb9141a60ec4b8ec544a npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els22.i686.rpm c55ae851ebeb20dfd4508318bb284218675abc9efb8bf1083d9f89f06a605119 npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els22.x86_64.rpm 65c4c7ff2f5b608332c44e20415bd92ef5a90a9551d05cf54dae29cad8a52c18 v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els22.aarch64.rpm 8012ee003e633d517f32c10c8c9a5fd7958f679ff596072e3a0c9c69d38c3927 v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els22.i686.rpm d94da3549c58e2143a28a0977825c02ad0fadb753247a613c648166bbaa98371 v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els22.x86_64.rpm 35bb63626bdaf45b0f9a7e5784c03ae8a8715de2a0391202fa27241805c05fa8 CLSA-2026:1791902755 TuxCare License Agreement 0 - Rebase to gimp-3.0.4-4.el9_8.14 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase to gimp-3.0.4-4.el9_8.14

0 tuxcare-almalinux9.8-esu gimp-3.0.4-4.el9_8.14.tuxcare.els1.aarch64.rpm f05f1725a40c4d43db5c9f2528c676264109ca3924997168c721a7589cdf9067 gimp-3.0.4-4.el9_8.14.tuxcare.els1.i686.rpm 8e6b87bd4ce399a0dfaff0b951cb672ee59ad866bc98a76d38fe178a55d34820 gimp-3.0.4-4.el9_8.14.tuxcare.els1.x86_64.rpm 3db19337699da189bee02ec1bbac37087d708e50b399183088969733a0a40cf3 gimp-devel-3.0.4-4.el9_8.14.tuxcare.els1.aarch64.rpm 6687d110cf96302bef48114a060b476ce9bb303982374eb93fa06430b2bb6750 gimp-devel-3.0.4-4.el9_8.14.tuxcare.els1.i686.rpm 7310384a1450591b89d18895e2bedf9644d185b4e1ac1feb3fdbed90bc3c542c gimp-devel-3.0.4-4.el9_8.14.tuxcare.els1.x86_64.rpm 799f36f65e5890fba463f141b3022b83e2bce1e638ef3e0b940b0f9b74bd7dc4 gimp-devel-tools-3.0.4-4.el9_8.14.tuxcare.els1.aarch64.rpm 38678f37a1a8cc444388453ccfb26ca7b58d467f47d96704ea261ba0f79ca7f9 gimp-devel-tools-3.0.4-4.el9_8.14.tuxcare.els1.i686.rpm 265d2bcf85e8f06826e73efab6dbca2417152a1b0aecaea67dade00e21bd1c32 gimp-devel-tools-3.0.4-4.el9_8.14.tuxcare.els1.x86_64.rpm 7354a64ef9e60407e2fedd21786ef14362673a563dd7079ac271bf63ccb4742a gimp-libs-3.0.4-4.el9_8.14.tuxcare.els1.aarch64.rpm 9991a6bf47b4294112c07db4f6d3805de0d05e450e4c214b50bb593bf797d3c0 gimp-libs-3.0.4-4.el9_8.14.tuxcare.els1.i686.rpm ef359b08fc15c65d067622c345b145546bb3c45c54931113a55f29624d201bbe gimp-libs-3.0.4-4.el9_8.14.tuxcare.els1.x86_64.rpm 1712f1f862051fec88405d1e1d1591036070654d8d3907f95c19e0ab0a353c46 CLSA-2026:1791466855 TuxCare License Agreement 0 - CVE-2026-103111: fix out-of-bounds write when growing the JIT stack for a single stack allocation larger than half the stack growth rate Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-103111: fix out-of-bounds write when growing the JIT stack for a single stack allocation larger than half the stack growth rate

0 tuxcare-almalinux9.8-esu pcre2-10.40-6.el9_8.tuxcare.els5.aarch64.rpm c54705845dd2c054f444e08bf243c05f53b047660ba1f6b1bdcde93c1df6fec4 pcre2-10.40-6.el9_8.tuxcare.els5.i686.rpm 98297d2ed1516c1f681003214e387dffdbc589af3b9322f63484ac73c7b174c8 pcre2-10.40-6.el9_8.tuxcare.els5.x86_64.rpm 81a35b9f5f9108136457770be54ee6e35f13a2203ea59c4fc724e31a5840faff pcre2-devel-10.40-6.el9_8.tuxcare.els5.aarch64.rpm e6ce967d51ff084805ba152551235098b8d28eebfe2e8dabdfaccd8674216a18 pcre2-devel-10.40-6.el9_8.tuxcare.els5.i686.rpm 3deaade917bdec332a2d1a4804afb8bf59ebf660891047ff5f50046eda19b40f pcre2-devel-10.40-6.el9_8.tuxcare.els5.x86_64.rpm 2be2500f53d7228596a76fa740de8e8bc82ee1b3f41da7f35a84c8a95615f666 pcre2-static-10.40-6.el9_8.tuxcare.els5.aarch64.rpm 25c910137a4e361ccc106889809856a92843ad960b1d5460e9359a2a32b1294a pcre2-static-10.40-6.el9_8.tuxcare.els5.i686.rpm 8ea6be6e156e03ee484b700b5d5ca0757f5e629c2dc106ff9b5079cc5443ad76 pcre2-static-10.40-6.el9_8.tuxcare.els5.x86_64.rpm 5bc98409ec83b1344b24ae415ed0c7ce879ceb212102cad981b066fb773db123 pcre2-syntax-10.40-6.el9_8.tuxcare.els5.noarch.rpm 6745ab5bbb8419e12a690470ac95b2675d3198b08f52b3776e4227085bf2f02e pcre2-tools-10.40-6.el9_8.tuxcare.els5.aarch64.rpm 6f5c951da0b4319277ddfc5a174c18cfeabe19de4bf77b6addb162e54aedbdfa pcre2-tools-10.40-6.el9_8.tuxcare.els5.i686.rpm 8e9be4556312d2e7b2166ded3a24defedfc42168024bef8afaa7f0357b75d352 pcre2-tools-10.40-6.el9_8.tuxcare.els5.x86_64.rpm 08d604277d95984887127f36ebd05b07717930feaf97054d5eb2da6c899dff6d pcre2-utf16-10.40-6.el9_8.tuxcare.els5.aarch64.rpm b6b75b9e31b271be7ef1db5c132dd4e5372a02b469b98835ed064b0648068240 pcre2-utf16-10.40-6.el9_8.tuxcare.els5.i686.rpm fac2a15a6df010bd67ed86e5e0c495d846091b54a54c821556de25724da29c17 pcre2-utf16-10.40-6.el9_8.tuxcare.els5.x86_64.rpm adf7b936e191834ebf8906cfc8f4fbdf9f70fca10218bee3a5b17f2fb7913782 pcre2-utf32-10.40-6.el9_8.tuxcare.els5.aarch64.rpm e6d7c55d227e1ebfa88e242b51ae7840c015491407c24e5c603387eccbfc60d0 pcre2-utf32-10.40-6.el9_8.tuxcare.els5.i686.rpm 4763e6316c15c3261f95645a94b3a2477f135a9e3c68a8099520612db8a89bfb pcre2-utf32-10.40-6.el9_8.tuxcare.els5.x86_64.rpm 0ebc0d0beceb13afaf1dec36db5184184e3b5acdfe679de8c26694ff597dddd8 CLSA-2026:1791967266 TuxCare License Agreement 0 - CVE-2023-4408: fix excessive CPU use when parsing DNS messages with many different names in the bundled BIND 9.11 export libraries Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4408: fix excessive CPU use when parsing DNS messages with many different names in the bundled BIND 9.11 export libraries

0 tuxcare-almalinux9.8-esu dhcp-client-4.4.2-20.b1.el9.tuxcare.els1.aarch64.rpm ded641eefe7af98f917e2a3914d9d14496b43b80aa86e4faaa2b355607b39848 dhcp-client-4.4.2-20.b1.el9.tuxcare.els1.i686.rpm 0a875e32e04303e5fcf30318881b1b0c35686fbb8ab82c9fea80d40c33c32aeb dhcp-client-4.4.2-20.b1.el9.tuxcare.els1.x86_64.rpm e9c2e90a3f3a84bf1a6259c823af5f3fe315a2fdcc2de30b70efa0a80d7a458b dhcp-common-4.4.2-20.b1.el9.tuxcare.els1.noarch.rpm fc4308171f05ebdf9658a607ab7e41e967aa1278644406833246ece7ba74cb25 dhcp-devel-4.4.2-20.b1.el9.tuxcare.els1.aarch64.rpm e73bda9e405c4732634cb594b08682232ce5f91641a11d9a32a5a8e5b8134b04 dhcp-devel-4.4.2-20.b1.el9.tuxcare.els1.i686.rpm a257ab3b70a6768118f6ca88ba583227fbc2634b14605a2cc3bcac619a61b23d dhcp-devel-4.4.2-20.b1.el9.tuxcare.els1.x86_64.rpm 15ea7b0151324bac1f56be2967e74f1d5a83c85627cda2765b3800ad53fefb92 dhcp-devel-doc-4.4.2-20.b1.el9.tuxcare.els1.noarch.rpm a3211a234d0c34a716f7a6b6c72f0d164e041cf634eb498de783f39ee79b338d dhcp-libs-static-4.4.2-20.b1.el9.tuxcare.els1.aarch64.rpm da20aa3f1e45610513dfc6e6d4e3c08b5627367317d60b475525e579706b65c4 dhcp-libs-static-4.4.2-20.b1.el9.tuxcare.els1.i686.rpm b6d99ffceb7f4cd95b5ea9b210139c17a9f0f0dfca05f801a061ced53546833b dhcp-libs-static-4.4.2-20.b1.el9.tuxcare.els1.x86_64.rpm defdbbc1494438ba3a9de1cb6df0b83b1bc0af3f9f2b65603378687ed54d421b dhcp-relay-4.4.2-20.b1.el9.tuxcare.els1.aarch64.rpm 0fedd7b50a84ad8ef71b05a4b7135dfdb7dbc8d78d88cf6bd841bb3fae9178e6 dhcp-relay-4.4.2-20.b1.el9.tuxcare.els1.i686.rpm 214ea59d3a286eddbbbda09a45ad5f6c094779d5e4101dadbeff3e097dc33288 dhcp-relay-4.4.2-20.b1.el9.tuxcare.els1.x86_64.rpm 9b0478901127d8cd441bb19a61cfede3739a838a76d42f51ec54726a55f8977b dhcp-server-4.4.2-20.b1.el9.tuxcare.els1.aarch64.rpm e36a1becc4442783482b1c53c9eab784441372a132f1b91c151e85736c9360a4 dhcp-server-4.4.2-20.b1.el9.tuxcare.els1.i686.rpm db0330cb0df2dbac1855d39e12cf3fd27e7352c9b5cda534de5739bdfa1a3941 dhcp-server-4.4.2-20.b1.el9.tuxcare.els1.x86_64.rpm f44a60020e036eb0025ce2022680fe2e470fd7916edee7d9fa640ab55d7277b3 CLSA-2026:1791970450 TuxCare License Agreement 0 - CVE-2024-52005: fix ANSI escape sequence injection in sideband messages by masking control characters by default - Resolves: ELSCVE-197836 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52005: fix ANSI escape sequence injection in sideband messages by masking control characters by default - Resolves: ELSCVE-197836

0 tuxcare-almalinux9.8-esu git-2.52.0-1.el9.tuxcare.els1.aarch64.rpm a07625bf7837481621b00b33429533b5b2383895b781c0a3c2a9a8727c9d7533 git-2.52.0-1.el9.tuxcare.els1.i686.rpm 84ece0cb93ee1e9a3780f9f870445b7dec2575cf059c2e2c43f95f1ba0664561 git-2.52.0-1.el9.tuxcare.els1.x86_64.rpm 439a2df8aa335955337a132ae5945e5c74901eed48cdf4ef7c57e0acc05128d2 git-all-2.52.0-1.el9.tuxcare.els1.noarch.rpm 83a7bbdd4d9b8fc1cd9930e75f59cc206d04ee4fe46a374d18e69cd101fc46be git-core-2.52.0-1.el9.tuxcare.els1.aarch64.rpm 81b736aebc182b53d46565728b79a2f2404c1a8c0263ae9f7a19f3bf6246777b git-core-2.52.0-1.el9.tuxcare.els1.i686.rpm 34e2a7f45d040364fac84dda48ee32cad7026b006234d498c3dae4f38ac246f4 git-core-2.52.0-1.el9.tuxcare.els1.x86_64.rpm dcd6a4571e4d697679961e81a4a0351a438a3ff35a837f6301f8de114565b77d git-core-doc-2.52.0-1.el9.tuxcare.els1.noarch.rpm da0fb2fab52645bee388c82eb8a2ef6e15fe0469e9b22e003ff8c96496261d7e git-credential-libsecret-2.52.0-1.el9.tuxcare.els1.aarch64.rpm d6aa62412e4d393c4ca11d2afc81ea30585d0fdbf76bc6cff4beca1861b2e30a git-credential-libsecret-2.52.0-1.el9.tuxcare.els1.i686.rpm 63d3ffff56f42841dc171d925a4c4a7cc1c6a8481e15f4ea35e9660dbac370d4 git-credential-libsecret-2.52.0-1.el9.tuxcare.els1.x86_64.rpm b37a6b095762def14147693a918f3ddc52336d0a9a24dfa801fa84230a009db0 git-daemon-2.52.0-1.el9.tuxcare.els1.aarch64.rpm 7b230ea37d62d7faee47462077f645dadc2308149b8f3b165dcd8d02bd1f4fa3 git-daemon-2.52.0-1.el9.tuxcare.els1.i686.rpm 2ef06b094e6a9d33253f65511a48154ea1c108d2fa2c2cf194365a6757731e71 git-daemon-2.52.0-1.el9.tuxcare.els1.x86_64.rpm 7afaf911b2b765e23f310fc9c2d076da5a42370c596bfe9c9a0cb513019417c6 git-email-2.52.0-1.el9.tuxcare.els1.noarch.rpm a2bddf7ebfdb4afe9841dabbbdd708d2853801f8f0710021b9c51b678dc2a4fe git-gui-2.52.0-1.el9.tuxcare.els1.noarch.rpm fb36039add14e43405b3ded68828393e85878931cf0d9e60033e6ef7dd9961bd git-instaweb-2.52.0-1.el9.tuxcare.els1.noarch.rpm ee8af982063b3b2b2bbc514a3229f59f9c88bb551760f74110635b9645d8f5df git-subtree-2.52.0-1.el9.tuxcare.els1.aarch64.rpm 904ef956c1ee3b25ba28ad5a4d10f4c85025f8a917a70791b78a704797e935dd git-subtree-2.52.0-1.el9.tuxcare.els1.i686.rpm a7e56876218c39ea786079b0dc103800f1320430582d099e79ba3a5cf556ee9b git-subtree-2.52.0-1.el9.tuxcare.els1.x86_64.rpm 06c036582b42741206137f6513f3988061eefa92f274b6b0a9f90454c8ed6b72 git-svn-2.52.0-1.el9.tuxcare.els1.noarch.rpm 7918d489b2260f0aca7446a7e7b241f8d747eeca0a8cf1014abd8cbe5e575cd1 gitk-2.52.0-1.el9.tuxcare.els1.noarch.rpm 2a96abe4ef24d6e8967a0f8e84a47f4d0fdfdafd6715a03663db8a7c7221a493 gitweb-2.52.0-1.el9.tuxcare.els1.noarch.rpm bddf8fa8da60df971d56e126c78d218c8b00b5608b44c5d23159d0996c6910ba perl-Git-2.52.0-1.el9.tuxcare.els1.noarch.rpm c781cfbf12fef14259da53958448a755710a8395b6feda38d32399d7365f1555 perl-Git-SVN-2.52.0-1.el9.tuxcare.els1.noarch.rpm a9e8e374b65c1497b366ebb2d466161e8d034554b5b9d187b054e503fa502a71 CLSA-2026:1791195487 TuxCare License Agreement 0 - CVE-2024-41123: rexml: fix ReDoS in REXML::Source when parsing input with many >]/]]> sequences or without a terminator - CVE-2024-41946: rexml: enforce the entity expansion limit in the SAX2 and pull parsers - CVE-2024-43398: rexml: fix DoS in the tree parser on deep elements with same-local-name namespaced attributes (the affected bundled rexml 3.2.5 parser/source files are synced with rexml 3.3.9, which carries these fixes and their prerequisites) - CVE-2025-58767: rexml: fix DoS when parsing XML with multiple XML declarations; only one well-formed XML declaration is accepted Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-41123: rexml: fix ReDoS in REXML::Source when parsing input with many >]/]]> sequences or without a terminator - CVE-2024-41946: rexml: enforce the entity expansion limit in the SAX2 and pull parsers - CVE-2024-43398: rexml: fix DoS in the tree parser on deep elements with same-local-name namespaced attributes (the affected bundled rexml 3.2.5 parser/source files are synced with rexml 3.3.9, which carries these fixes and their prerequisites) - CVE-2025-58767: rexml: fix DoS when parsing XML with multiple XML declarations; only one well-formed XML declaration is accepted

0 tuxcare-almalinux9.8-esu ruby-3.0.7-168.el9_8.tuxcare.els2.aarch64.rpm 50246ad913fda5e8fad821284039004f8f89ee100ee39b937f58591367910790 ruby-3.0.7-168.el9_8.tuxcare.els2.i686.rpm c70270bfa4ce3316547b847834eef198e6d28ab11ae7fba257a0278f4b20ec06 ruby-3.0.7-168.el9_8.tuxcare.els2.x86_64.rpm a61f48cb6deeca1059e082edd674bff5d666df5b58f3d4188b2ac1bd2830eafb ruby-default-gems-3.0.7-168.el9_8.tuxcare.els2.noarch.rpm bc5a8a9bf723a594b2a10954dacce0d1ea1b055d76b87a311da3cce44084720f ruby-devel-3.0.7-168.el9_8.tuxcare.els2.aarch64.rpm 3e84ea96683a3407898d5156875b206ed0426988e06cf445afbc0b308c366972 ruby-devel-3.0.7-168.el9_8.tuxcare.els2.i686.rpm b9d6776577f021d385ab440c6e61174bb692b5e36d00535f49ba4da4a57027e2 ruby-devel-3.0.7-168.el9_8.tuxcare.els2.x86_64.rpm 4281c26f289eb487a3602f8be72ed2420f82561856ad99a966d0ffd742a20f9c ruby-doc-3.0.7-168.el9_8.tuxcare.els2.noarch.rpm 172b5445bafd756cf8cf30a0f4b8eafaf704dd1213088f8cff51662ae956bb92 ruby-libs-3.0.7-168.el9_8.tuxcare.els2.aarch64.rpm c9621c9dea5c5ac74ee527f236588e2b970925b5f89d46807a4214c57725f5d6 ruby-libs-3.0.7-168.el9_8.tuxcare.els2.i686.rpm 44dacdcfe3f3cca5ebdba37ed1629b6f802fa5720f6b68604aec91a98f881148 ruby-libs-3.0.7-168.el9_8.tuxcare.els2.x86_64.rpm e6f9e26f5db0c7ae2d70cf1f86282a00c9eec15e39be9cb1575b3dd73cd8238a rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els2.aarch64.rpm 03124ccfde08a95766e777e9ba0f55a96d9aaf9ce943402d7d21720fb5a7c367 rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els2.i686.rpm b396c522156fd1235b8397ef3fbae1a81ad9e4fe0258f27fda80fbd7cbf25736 rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els2.x86_64.rpm 66dae29fa205e07073f95772c97ae14517be95ef4739d12784c3132f34066110 rubygem-bundler-2.2.33-168.el9_8.tuxcare.els2.noarch.rpm 63ab215df19bb84b3c8ab2b2cbe7ebf0cd3402a2a92b3a594dbce008f1887221 rubygem-io-console-0.5.7-168.el9_8.tuxcare.els2.aarch64.rpm 8b5249c8a60d8aec125ecec284cffff44825ef9a630b031ad61359c2eead8406 rubygem-io-console-0.5.7-168.el9_8.tuxcare.els2.i686.rpm 16ee5cb34463ac5b1f9eb40b43bba676ca9314b2f2cf78515b8d4b5b4ab9c44c rubygem-io-console-0.5.7-168.el9_8.tuxcare.els2.x86_64.rpm 3109162859d172b8eb4098ea751b6a6400eeb530cd5c10380f22f60c71cede32 rubygem-irb-1.3.5-168.el9_8.tuxcare.els2.noarch.rpm 5bc70b3c9966a89e4e7afedd4849449160e804fe48b6cc5ea83d382071cf3095 rubygem-json-2.5.1-168.el9_8.tuxcare.els2.aarch64.rpm c143aa2860f1fc6efffd3a5da08e33678e219f7c9ecdcdae5554cc0e75d9e441 rubygem-json-2.5.1-168.el9_8.tuxcare.els2.i686.rpm 3733837f7e39117f01d98475f59b0084fe6c6ba646807b524ba70e55cbbe3098 rubygem-json-2.5.1-168.el9_8.tuxcare.els2.x86_64.rpm 36ea78982b54a441d94748420d1a7edde2de0c66309202340c789e27e6f33b78 rubygem-minitest-5.14.2-168.el9_8.tuxcare.els2.noarch.rpm fb51541d2ad4c6a2de4dd890effbfb4efb3727199966132a30a124c7a7073f4b rubygem-power_assert-1.2.1-168.el9_8.tuxcare.els2.noarch.rpm 86271d4027d8c3c0c461f00a1267652fff3066f497a5bccc8f33e1dc5b022ee5 rubygem-psych-3.3.2-168.el9_8.tuxcare.els2.aarch64.rpm 28846937c2797d763a45d723e30d475815a35984e175d7650a8a9f4ea2486e18 rubygem-psych-3.3.2-168.el9_8.tuxcare.els2.i686.rpm 8dc404b282c961d0cd61547479ee2d9aed3643a91830319d96e90aa1edec854e rubygem-psych-3.3.2-168.el9_8.tuxcare.els2.x86_64.rpm 6795c72a32e8237262a2bb603c7f15d34ccd983c86146bf0f620c96214c6fa9d rubygem-rake-13.0.3-168.el9_8.tuxcare.els2.noarch.rpm 9f99d937b669dff20a27ac6abc9d34447db3c04d3da01f5b3d0b76ec8334fbc4 rubygem-rbs-1.4.0-168.el9_8.tuxcare.els2.noarch.rpm ff83c30693f420c88e3dcc6416aba3572230d980e3fe047de329bd8adfd0302c rubygem-rdoc-6.3.4.1-168.el9_8.tuxcare.els2.noarch.rpm 35f2adb74607a47bfea3d2d538943cda990b3cf1c7abf04a0f44f747891bf8f0 rubygem-rexml-3.2.5-168.el9_8.tuxcare.els2.noarch.rpm 09ff1214a3ff9daefc44d715ef5fc5684b6663af2f16d46c77580ee038ecacee rubygem-rss-0.2.9-168.el9_8.tuxcare.els2.noarch.rpm e82afd6f59422e3b8d52073f7b8d46e5be03a4e6ca0fa510f9d97fb4ac5fa147 rubygem-test-unit-3.3.7-168.el9_8.tuxcare.els2.noarch.rpm 4183259714088321523853a48a3b9dfc0c96e00d4fee401fd9890d82aa0c1972 rubygem-typeprof-0.15.2-168.el9_8.tuxcare.els2.noarch.rpm 3ad9e2e4427379480c9f5e293a490e4ff46f3729466802d89f2061befe757ee0 rubygems-3.2.33-168.el9_8.tuxcare.els2.noarch.rpm 550564ddf2e15ab74a62afd5be987b9d00771442ff1e787de8e0a8b331236b19 rubygems-devel-3.2.33-168.el9_8.tuxcare.els2.noarch.rpm 345b38f04d05151a605b05b4b08ab4a21cd3f51037f3c642d31dd7980c303ae7 CLSA-2026:1792058958 TuxCare License Agreement 0 - CVE-2026-4800: validate the `imports` key names in the bundled lodash 4.17.21 `_.template` and merge `imports` with own properties only, so a polluted Object.prototype key can no longer be spliced into the compiled template's Function() parameter list Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4800: validate the `imports` key names in the bundled lodash 4.17.21 `_.template` and merge `imports` with own properties only, so a polluted Object.prototype key can no longer be spliced into the compiled template's Function() parameter list

0 tuxcare-almalinux9.8-esu grafana-10.2.6-23.el9_8.3.tuxcare.els6.aarch64.rpm 6250e56052a46fb0464d2c0efc05485aaea6fb87f5453a20681fa00442e7cf35 grafana-10.2.6-23.el9_8.3.tuxcare.els6.x86_64.rpm 62ef47c229d9806b690e670c4eb7497c00516fcab7c2c1735547003af711fb60 grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els6.aarch64.rpm 49fa5632cf8ec2765a8f97f26359c0ec4ec38f3b77860b64d0f7df025086d4b9 grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els6.x86_64.rpm 5eaad598a843626201947eac1ac5a23a2cdd0bf9a3f701822de3bfce3079507e CLSA-2026:1792083180 TuxCare License Agreement 0 - Rebase onto the vendor's 1:3.5.8-2 sources - The TuxCare duplicate of the vendor's DTLS retransmission fix (ssl/d1_lib.c, ssl/statem/statem_dtls.c, test/dtlstest.c) is dropped; the vendor's 0058 patch carries the same fix - Drop the vendor's Patch0053 declaration (0053-Allow-hybrid-MLKEM-in-FIPS-mode), whose file is not shipped in the vendor source RPM - All other TuxCare security patches are retained unchanged None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto the vendor's 1:3.5.8-2 sources - The TuxCare duplicate of the vendor's DTLS retransmission fix (ssl/d1_lib.c, ssl/statem/statem_dtls.c, test/dtlstest.c) is dropped; the vendor's 0058 patch carries the same fix - Drop the vendor's Patch0053 declaration (0053-Allow-hybrid-MLKEM-in-FIPS-mode), whose file is not shipped in the vendor source RPM - All other TuxCare security patches are retained unchanged

0 tuxcare-almalinux9.8-esu openssl-3.5.8-2.el9_8.tuxcare.els1.aarch64.rpm 5c712639ed3ec9bc63d13a042e9f683432109c1b8bd226dc7809fd6788d7051f openssl-3.5.8-2.el9_8.tuxcare.els1.i686.rpm f53c98742383dfcb13972abee7dd6a6fa97bf81da33eceec8a83b4fa00afdb3f openssl-3.5.8-2.el9_8.tuxcare.els1.x86_64.rpm 8e78e088e0fe6999f1e4eea537c712adf572c157a1277bf8a9ea75089e4f9f04 openssl-devel-3.5.8-2.el9_8.tuxcare.els1.aarch64.rpm d3f3316f30143986f0eb1acb2a9f82efb65be8fe181e723ca5bd665a15a9504e openssl-devel-3.5.8-2.el9_8.tuxcare.els1.i686.rpm ed00bea2158dcfefef6fbb91b0f711c67cfb574b956b1d9b6643604de77039fd openssl-devel-3.5.8-2.el9_8.tuxcare.els1.x86_64.rpm b91c59964385c3c056f8e0d47487ef7aeb83fe14bbf0ba03f0de5bd7be948ac8 openssl-fips-provider-3.5.8-2.el9_8.tuxcare.els1.aarch64.rpm 8802f0c342f6a0da4fad142564dcf4a6a81a2b516469a8632dd0a30b05074832 openssl-fips-provider-3.5.8-2.el9_8.tuxcare.els1.i686.rpm e86083cf0de8aa1f4a460779e19466ffb7d41c3d3a207472fe2ec9c1e5ddce18 openssl-fips-provider-3.5.8-2.el9_8.tuxcare.els1.x86_64.rpm c92c40e925d223496caecedb748ee35f6ef30fd057b77b5eb6d24980198f4a18 openssl-libs-3.5.8-2.el9_8.tuxcare.els1.aarch64.rpm db6e6ba4731a84fde47ef068c6713b1d301bec28c051e1c54b4789aecf3e5fa0 openssl-libs-3.5.8-2.el9_8.tuxcare.els1.i686.rpm 737995232cc2e07b1cb534dc00afee24973819d00adec6c1afec20cbb5afa255 openssl-libs-3.5.8-2.el9_8.tuxcare.els1.x86_64.rpm 827d3dc7c9b26e9ad38f36300aa45f6b4d79d5e18fd7f7d30651993c183ef9de openssl-perl-3.5.8-2.el9_8.tuxcare.els1.aarch64.rpm ca94b71edcdd7555fea7582e33070333e1fcccc2dff818378101c707bd3b3152 openssl-perl-3.5.8-2.el9_8.tuxcare.els1.i686.rpm a828f9631fc346fd9a4e7dab0d0fac4afe36f3f5c08b31b558ec4fd502d48c4b openssl-perl-3.5.8-2.el9_8.tuxcare.els1.x86_64.rpm 523c048b7c4575f3077b7eb1fcaf27969ea4136a89d434d72ecc3d15a8f713a5 CLSA-2026:1792087341 TuxCare License Agreement 0 - CVE-2026-107570: fix heap out-of-bounds write in convert_file_from_to() when the colon-separated charset list contains a zero-length entry Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-107570: fix heap out-of-bounds write in convert_file_from_to() when the colon-separated charset list contains a zero-length entry

0 tuxcare-almalinux9.8-esu mutt-2.2.6-2.el9.tuxcare.els5.aarch64.rpm 0a4fa22291acf734ecd4b12c5913bfcefe69dabdb9afb3539fd4b1114ca038ad mutt-2.2.6-2.el9.tuxcare.els5.i686.rpm 9523a4ca5f6faa950615d76f287f850594f50db02984e160d8732fd00b522cd2 mutt-2.2.6-2.el9.tuxcare.els5.x86_64.rpm 1e74050936d15ebf9e56418bcb2de3e1fff2dc723a4ba6e304d0a469c8386547 CLSA-2026:1792137683 TuxCare License Agreement 0 - CVE-2025-11395: oci-archive, storage/pkg/archive: prevent writes outside the destination when extracting a crafted tar archive Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11395: oci-archive, storage/pkg/archive: prevent writes outside the destination when extracting a crafted tar archive

0 tuxcare-almalinux9.8-esu buildah-1.43.3-2.el9_8.tuxcare.els1.aarch64.rpm 3010c3d1643391c3ef1ee2ee275e246d5f1b6c7b29b5b8bede70a16898a530a3 buildah-1.43.3-2.el9_8.tuxcare.els1.x86_64.rpm 133b487abc8fc8b6b75280ac4c056a8909961f29cc380522df097bf6b5845e8a buildah-tests-1.43.3-2.el9_8.tuxcare.els1.aarch64.rpm ddbc0abc64482b44682e5f48f0708ec5d0840b62207921c211c6df3c9be11962 buildah-tests-1.43.3-2.el9_8.tuxcare.els1.x86_64.rpm 06edc48dd551a6cfd7f606d829f89e58daca0cf26bd1fb8994d1632125ad721a CLSA-2026:1792148589 TuxCare License Agreement 0 - CVE-2026-47360: mod_session_cookie: remove the session cookie also when the session was already loaded under a different SessionCookieRemove setting - mod_session_cookie: as in 2.4.69, with SessionCookieRemove On the session is empty for later loads in the same request, so a SessionMaxAge refresh, a SessionHeader update or a mod_auth_form login can lose session data Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-47360: mod_session_cookie: remove the session cookie also when the session was already loaded under a different SessionCookieRemove setting - mod_session_cookie: as in 2.4.69, with SessionCookieRemove On the session is empty for later loads in the same request, so a SessionMaxAge refresh, a SessionHeader update or a mod_auth_form login can lose session data

0 tuxcare-almalinux9.8-esu httpd-2.4.62-13.el9_8.6.tuxcare.els6.aarch64.rpm 1982f5d22d51ed94a3b2e7c8542461bd2028730ea52c02fc379f11fd032e4539 httpd-2.4.62-13.el9_8.6.tuxcare.els6.i686.rpm b486cc18e09388ea22b8f31d2e2ca17e3f6203b03a0a666e02c4fc5bfa47e495 httpd-2.4.62-13.el9_8.6.tuxcare.els6.x86_64.rpm 44609318c1053506c103997065c40ca4f6a71c1e79f47367f5dbbc2b3009caa4 httpd-core-2.4.62-13.el9_8.6.tuxcare.els6.aarch64.rpm 57f242f8462488aad826907d34535c0d13cf2a7ba42b05c85932f9b6210325b7 httpd-core-2.4.62-13.el9_8.6.tuxcare.els6.i686.rpm cb3a7bea7b395959de837110bcba4d1960c67e87ec32bc97080c619e469f004d httpd-core-2.4.62-13.el9_8.6.tuxcare.els6.x86_64.rpm 98360f9efb2e50193b12bfdf3a385753ea8bac020bc0e1cc0839ea893848b0c2 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els6.aarch64.rpm f967b74b0738b4b5955f1e719fd34baa4214c2209ecfbffdc0bd1b2170992a92 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els6.i686.rpm 68697fb0bd6798884e5619fec2f1984b89bea5a219f6ae52d0595878b1c86ae3 httpd-devel-2.4.62-13.el9_8.6.tuxcare.els6.x86_64.rpm 79d7f3d68764b0246620519c35da2685ec5dc1bcff959b9d5d1d4c605870d938 httpd-filesystem-2.4.62-13.el9_8.6.tuxcare.els6.noarch.rpm 52d9a5e942f0b9b87cbb6a227cfcd19f5e9af146ee11672758f5085cefd93333 httpd-manual-2.4.62-13.el9_8.6.tuxcare.els6.noarch.rpm cc01aef085c1fc7cfb54300d33e013a583aa25c5200dcd31ada1e03065702830 httpd-tools-2.4.62-13.el9_8.6.tuxcare.els6.aarch64.rpm 3a18cfe1856126a69fcfbd2d87c0730991e3c74838fce5d3157ffea37fbbae84 httpd-tools-2.4.62-13.el9_8.6.tuxcare.els6.i686.rpm 53db722ba4bee9bb9bd4a0d3591a6b26d32081950e8d8d9f376407ade74fd88e httpd-tools-2.4.62-13.el9_8.6.tuxcare.els6.x86_64.rpm 858a96d241dd497e6de430192f632cc7a34be16c874fabd9b0baf0021d9a7f37 mod_ldap-2.4.62-13.el9_8.6.tuxcare.els6.aarch64.rpm 1de4d615494764cc40f50083f7fd2bc626c0c14c076fc2f6edcc05ee3db69bfe mod_ldap-2.4.62-13.el9_8.6.tuxcare.els6.i686.rpm 36bdaf1e79090148d546973635992455aed4f5e17bcbb19ae5cb23497e255b55 mod_ldap-2.4.62-13.el9_8.6.tuxcare.els6.x86_64.rpm 874b8d2c9f59245f66fd143c344d7029c19af2bcc3bf4da982fc65d32f9b27af mod_lua-2.4.62-13.el9_8.6.tuxcare.els6.aarch64.rpm 5ef00db38c31fa2c5d407ac514cc0d7005ce4bdf7be560cfe2360379059b32cc mod_lua-2.4.62-13.el9_8.6.tuxcare.els6.i686.rpm 343ce20c096511fd0ff0aaa193092c4af99e5ac8b669fa4afc3ad052d0c8b540 mod_lua-2.4.62-13.el9_8.6.tuxcare.els6.x86_64.rpm 228b328e946a5ce7dd97bca56ef13a60cef80635324c8ce75d4b9437cd3371bd mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els6.aarch64.rpm 49756f1080781a9f7b60cd5625472f05fdf7a496a67f28a8be961fef16d6f2b3 mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els6.i686.rpm ee2ebde6823142cd9ae0272532c907fcce027100c36c16593ec373a79ebcea04 mod_proxy_html-2.4.62-13.el9_8.6.tuxcare.els6.x86_64.rpm eb66b8c19c2d4229255db3e5c0787f48545649a3bbf0852fc5ba5caf14044d49 mod_session-2.4.62-13.el9_8.6.tuxcare.els6.aarch64.rpm 8320217fae79ea7d0a1af8e426c8d5109dc0c16b19d4cf507cba59cca9a7d7a6 mod_session-2.4.62-13.el9_8.6.tuxcare.els6.i686.rpm 53673051cfb4e52a0600c7b03cf68b98b30e9bb2c98ae6ce89e5b9586cf0a78d mod_session-2.4.62-13.el9_8.6.tuxcare.els6.x86_64.rpm 92c51f1486b4a5b324b47e05826601d46ab7ccc600658f2d302bc8f2f0756468 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els6.aarch64.rpm 1218b387a65884ffa4aa7cb29c80fb9a915c02a115bac50eec3503e4dcef4813 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els6.i686.rpm 82e8e6c4c82396115a28cd8a48dff018b56b01dd18d40d823d5f200660769192 mod_ssl-2.4.62-13.el9_8.6.tuxcare.els6.x86_64.rpm cea6d0d4dcd44305fe6bd8b5671d83d77563316cfc15947f68eb628c99d3e69f CLSA-2026:1792151379 TuxCare License Agreement 0 - CVE-2025-66471: fix unbounded decompression of HTTP responses in bundled urllib3 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-66471: fix unbounded decompression of HTTP responses in bundled urllib3

0 tuxcare-almalinux9.8-esu python3.11-pip-22.3.1-6.el9.tuxcare.els1.noarch.rpm 3abbb15ef4a1ff884013648d17c52d213d514ecfccfaf0fd6f31f8e35b5dbe19 python3.11-pip-wheel-22.3.1-6.el9.tuxcare.els1.noarch.rpm 0cb3d4160e4fffa92a90f063e214c3bf3c08b7e7727dc5d4ed903ec7073b1eea CLSA-2026:1792154123 TuxCare License Agreement 0 - CVE-2026-19445: ssl: resolve the SSLContext for the SNI servername callback from the connection instead of the borrowed SSL_CTX argument, and unregister the callback in context_dealloc, so a context released after sni_callback switched the connection is no longer used after it is freed Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-19445: ssl: resolve the SSLContext for the SNI servername callback from the connection instead of the borrowed SSL_CTX argument, and unregister the callback in context_dealloc, so a context released after sni_callback switched the connection is no longer used after it is freed

0 tuxcare-almalinux9.8-esu python3.11-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm 00532e07f8dbdacc3d9729fa890fa08b1223c6d143a16231c3a41eaee86856c8 python3.11-3.11.13-10.el9_8.tuxcare.els2.i686.rpm 8d788bb775ca1fa763e32fbe4d9affec474521f982f27bf5648a351fcd467e3a python3.11-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm 20b043bf51f952c7e5e067b3e29865adaf2573cc4ba17a79dd2395e823a12c9b python3.11-debug-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm eab7f6e2421229823df9f41bbc6f8f6f089db13a3503b6e926234cfe9cf5935a python3.11-debug-3.11.13-10.el9_8.tuxcare.els2.i686.rpm 58f2bff55223c146043f1c4b575002f2f5ca8919597d3182bfd96633435f2244 python3.11-debug-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm c0e527dd2173e8940b199a78ef4c35d1a2161af3fc7df9d0006f1bff5076e4cb python3.11-devel-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm 592a9dfb00495d99b5184b12b6e718158667829be5d07146ecdb1ff8efe41439 python3.11-devel-3.11.13-10.el9_8.tuxcare.els2.i686.rpm b304a668f7160af6b44685a43bc972a486f948122ba7d1721236d2700a879413 python3.11-devel-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm 59d2857892eb5cf9584ccbefa8a12277eb28ee74518498b4458daf90c5fc8dc1 python3.11-idle-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm d11779196a168c0785fce7ffb638bef63f0447085bc3e44625b0a7fb5f314577 python3.11-idle-3.11.13-10.el9_8.tuxcare.els2.i686.rpm 95e33a9b1663ad1e6397aeb496d250801a6bbd7be9a1b2f801a40ba344626a1b python3.11-idle-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm 1a41f28b8ef84e4765aca71ada1b8d52bf38761ea0e0f15aaa3d2ec5800fa383 python3.11-libs-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm cf89be4c611f1fa54b256896e11af013c553a91517a30d95a0b0d0670d9e6f07 python3.11-libs-3.11.13-10.el9_8.tuxcare.els2.i686.rpm 75e02999d0734987062e5935281d23679c32e966605d87ba4d2ecc947c17aca5 python3.11-libs-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm 1b0e14f98c919a731a7bdcf59ab813acedb560240a34f77493d873b97ea520ae python3.11-test-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm 1aa3ba2cfb23018d159d272cbbf6943ad585c9537fae1bf79d7ca9e9dcf490d1 python3.11-test-3.11.13-10.el9_8.tuxcare.els2.i686.rpm 8133cb7d88db6a9e5f2bf2a581cb6eb7f0d7374d044af48fc2cc4e34dbadc1f8 python3.11-test-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm 48737e2f0776e771d9a17c879a86966c9193e0ff0dd33d0d76107c31531b6827 python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm 9683936f189b99aa33aba94aa47a455af702b6fde74b26943bf810795a2ceebf python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els2.i686.rpm c203e87a0a34cf7976e7cd774c64ae88641579e893be42aa023cba6b4f599c20 python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm fc812df4a9f5fff341e8d9d5633ccdcc2ca4003cf229f82e4560fd0585315778 CLSA-2026:1792155817 TuxCare License Agreement 0 - CVE-2026-15176: reject alias URI to path mapping in ngx_http_map_uri_to_path() after rewrite changed the URI Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-15176: reject alias URI to path mapping in ngx_http_map_uri_to_path() after rewrite changed the URI

0 tuxcare-almalinux9.8-esu nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm 9705c63f18e335fe3c3f6792691c497ee453d264ec0fd4b35ee6bb7267cea819 nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm ecfbed4437893793f36baa52dca8c5045cad8c0f959ee16c6b7da236af9df582 nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm 3fd82ba7854ebc91f1936bd2ac8c54d3fc5db89b3d6b1eba60340ef116acde12 nginx-all-modules-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.noarch.rpm e93a61b257ce05195cbdd1461a38f43bddcabab1903166940d39916d48489bd7 nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm b37f89c9339697b2aaea3cd81997edcbe6c2c1803e6398df4658df49293fb0b0 nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm b5a3969f9ee8e3945d96da411e5e239d7794fa974c73782661e8a8f3c3ed0bec nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm 5f545981b46285618488c47942b8c213514250ce121b11d63685cd0f0ec4b6e7 nginx-filesystem-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.noarch.rpm 1171efe5d8eaef44414fc553accab1791934dba6de9a267b20e0379b1f5f8c95 nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm 73f3161e69b7aa36621e18b254a75257c69c76e57644bfb649f193427ca4c8ae nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm 015dcc085b375a82bc3c3d2e9d9f3a1cea1e4153ae29504f385fff95ea48ff85 nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm 05f830ce337ec236040ebd36c348254fd8bc71e68b645ba0167c0c3a41b91ad1 nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm 321ce717eb92c51e6079970a4de63a94bcb14e031a2bfbc0ab32d34667c5534f nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm 23674e1e4017a2b785759a421847d40811ae80ef92a7967e63102765920eca22 nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm b3a85eee5701f5e8b136834c9abcd75206a6de1a2e8abc16123ace6b5d610e6d nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm f8a6c6b279ae59b78fd2e954de81a53e8e303363b815cabb59c4c3f171171ffa nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm 90d5eb179b489ea3212aa0d84a33184d217a44ac5db508f71b318fa32c174303 nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm c9234710d405b008c0cef39e8c4df20cbfde6a5def293632c5174d605186c6d6 nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm b6b0223cbf6758b0a1d2787c0c04e4eb64b5df62fc58e27f86d6461434c92581 nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm d9512b052b79a88b01269d5eb37c04b3c98c1a5b4ab714cdca910b6b6ae02349 nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm e7efa42924e1748e16b5036de8532082bd26e0724f3ac716e1413f939f55b523 nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm 0c54ceff3bbc0604f1ba6d4feece73b3345bc227e6d959d1cfa4b854924cc055 nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm 2d1a726854702e3a54d0f36d58d2913fb765c8b9a7e0bffaf7f91da104163aac nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm e6f16d1f641d8e1d652417a4395690cecc3a291c87eed036cf6e22cad5fa6794 nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.aarch64.rpm 15729766746d47781d7b881f53ec4e20ce0a082679b771465cd9d8844c8c17c5 nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.i686.rpm 8e47d55ac1b8a489e37e38462652c170d8e280ae8e4efd5a20efdbf57c8766cb nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els2.x86_64.rpm 4f98aeff0b7933c8d6b420e63bdaa63a613ce64be1d8daa3349233d03367c768 CLSA-2026:1792150755 TuxCare License Agreement 0 - CVE-2026-53705: fix integer overflow in the wavpack decoder output buffer size calculation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-53705: fix integer overflow in the wavpack decoder output buffer size calculation

0 tuxcare-almalinux9.8-esu gstreamer1-plugins-good-1.22.12-7.el9_8.8.tuxcare.els1.aarch64.rpm fdf6eb5fa007966c71cdf42d83b569a7528c07a7ed5d2a2b83db5162f7415e4d gstreamer1-plugins-good-1.22.12-7.el9_8.8.tuxcare.els1.i686.rpm 77210b5ea9ccba3a9a24cb60a3f2d75f041e4a0288615b7b6a9edf69d907238b gstreamer1-plugins-good-1.22.12-7.el9_8.8.tuxcare.els1.x86_64.rpm 4d5026e1d548253ec388a12790e16ebe1aaba20750f1f70d63833c2777f5b43c gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.tuxcare.els1.aarch64.rpm 84b306beb9ca560c04fa63265e37b5827e40f557bb5079225ae864f371707002 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.tuxcare.els1.i686.rpm 30f3fed23dc518a090981cddd5d6256498386b76ce787330c88236e1e6d73b62 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.tuxcare.els1.x86_64.rpm a9f0cf874bf0e9f08c454f6353565d8f8e93479166f2b3e9090af06352ed644c gstreamer1-plugins-good-qt-1.22.12-7.el9_8.8.tuxcare.els1.aarch64.rpm c815ba3159e6dac4c4c8f61e410a1a534512bf3c24154feaf8b70516a017d853 gstreamer1-plugins-good-qt-1.22.12-7.el9_8.8.tuxcare.els1.i686.rpm 6bfd7a9c2d0f5c87f02e486897c2530a313261e954f5a3b84dea40eafc84da7c gstreamer1-plugins-good-qt-1.22.12-7.el9_8.8.tuxcare.els1.x86_64.rpm 210e64b8890a0e9f32b36e22ab495c06f3e8899531b5dc663f27965cb31be604 CLSA-2026:1792190935 TuxCare License Agreement 0 - CVE-2025-66418: limit the Content-Encoding decompression chain to 5 links in bundled urllib3 - CVE-2025-66471: fix unbounded decompression of HTTP responses in bundled urllib3 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-66418: limit the Content-Encoding decompression chain to 5 links in bundled urllib3 - CVE-2025-66471: fix unbounded decompression of HTTP responses in bundled urllib3

0 tuxcare-almalinux9.8-esu python3.11-pip-22.3.1-6.el9.tuxcare.els2.noarch.rpm 832d6c35dd9191514a48db65e8d3845bff4fb340ecc311416a8a86a660aef524 python3.11-pip-wheel-22.3.1-6.el9.tuxcare.els2.noarch.rpm 7747d0406f9e5f0dcc2cb3e3f773e46c79c4167422367a2235ba27a3ecf9b4de CLSA-2026:1790934009 TuxCare License Agreement 0 - Add Alma9_8ESU; carry the tuxcare9.6esu CVE fixes - CVE-2023-7207: path traversal via absolute symlink targets under --no-absolute-filenames; drop cpio-2.13-revert-CVE-2015-1197-fix.patch and apply the upstream symlink-placeholder fix instead - CVE-2026-66485: avoid stack exhaustion from archive-controlled paths - CVE-2026-66486: quote file names in diagnostics and listings Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Add Alma9_8ESU; carry the tuxcare9.6esu CVE fixes - CVE-2023-7207: path traversal via absolute symlink targets under --no-absolute-filenames; drop cpio-2.13-revert-CVE-2015-1197-fix.patch and apply the upstream symlink-placeholder fix instead - CVE-2026-66485: avoid stack exhaustion from archive-controlled paths - CVE-2026-66486: quote file names in diagnostics and listings

0 tuxcare-almalinux9.8-esu cpio-2.13-16.el9.tuxcare.els3.aarch64.rpm cafb45dd8d74b4d6c5318eec7eddd139bfb76c1ada2ab5b1472040e932cf6a65 cpio-2.13-16.el9.tuxcare.els3.i686.rpm 0ffefe689c437ea676786f26fa9ce28ffb7d856d3bbb4500fb6fb2a9b0ba2dae cpio-2.13-16.el9.tuxcare.els3.x86_64.rpm 8251c7513fb9ea88a09c122723b0b725626dfecbebbae13298923100069aa3f1 CLSA-2026:1792208835 TuxCare License Agreement 0 - CVE-2026-19553: ssl: validate the SSLContext.wrap_bio() parameters like wrap_socket() does, rejecting server_hostname and session in server mode and warning when check_hostname is set with no server_hostname, so the peer identity is no longer silently left unverified Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-19553: ssl: validate the SSLContext.wrap_bio() parameters like wrap_socket() does, rejecting server_hostname and session in server mode and warning when check_hostname is set with no server_hostname, so the peer identity is no longer silently left unverified

0 tuxcare-almalinux9.8-esu python3.11-3.11.13-10.el9_8.tuxcare.els3.aarch64.rpm a1bbbb977c0972c1c8abb11d6ba08383b162b55fb8fbdcd45f8c1326e3d9ae17 python3.11-3.11.13-10.el9_8.tuxcare.els3.i686.rpm 805a01e4847c61e16c32fa6a25f97c28a5d60947471893578d4e48e7a1284156 python3.11-3.11.13-10.el9_8.tuxcare.els3.x86_64.rpm e8744916a45e1882d647435cebc643fd72b5a4e8dd9ec74b58d616b06e7136f6 python3.11-debug-3.11.13-10.el9_8.tuxcare.els3.aarch64.rpm 77990f2d69f6ffabaaf430a03c128b7447df01d6d10d05de7bc64408ccdedb27 python3.11-debug-3.11.13-10.el9_8.tuxcare.els3.i686.rpm 658191f1ecf422560d0b625dff1de758f01f9890e75782f38b94da0aec5a3a86 python3.11-debug-3.11.13-10.el9_8.tuxcare.els3.x86_64.rpm ce5a4af90b9c6322b57c33114077d64fbc8d188ad72b2fade19c2006c8b8cd9e python3.11-devel-3.11.13-10.el9_8.tuxcare.els3.aarch64.rpm 85f32eb82e38f0a4438ea92a1514c57c36998b1260cec4ecf2852220f1393a05 python3.11-devel-3.11.13-10.el9_8.tuxcare.els3.i686.rpm 3bbd25fc77568378ad8de68ca1d7676dc1ead52ac07899870376687a01dab5aa python3.11-devel-3.11.13-10.el9_8.tuxcare.els3.x86_64.rpm e6061b23d48592bd8e836632350ba831df478c0eab946fd6867f28c2ce6bc633 python3.11-idle-3.11.13-10.el9_8.tuxcare.els3.aarch64.rpm 9afa37e5a98447c0b2bc04675ebf1a9539a26a99ba022c304787077a6d3939b7 python3.11-idle-3.11.13-10.el9_8.tuxcare.els3.i686.rpm 88a1de0eaaac9fa02b7b6cb6bd6a0faf4ec6eab9430e8709a79a0531a918b012 python3.11-idle-3.11.13-10.el9_8.tuxcare.els3.x86_64.rpm e6076b6049ad2f30ad7e62cb57cee4d582c5e38083a5e762e064928b2176bd41 python3.11-libs-3.11.13-10.el9_8.tuxcare.els3.aarch64.rpm 1f01dd87e710eb4827e5793b9c8bf448b68ba8f049532694d7a6d96bcaa04b1c python3.11-libs-3.11.13-10.el9_8.tuxcare.els3.i686.rpm c4a86d84f3840ef9798a4c0cd6f5d925508238deda875a00c9deb1df18dd6af5 python3.11-libs-3.11.13-10.el9_8.tuxcare.els3.x86_64.rpm 8e73072f883c688daf6c4520b01bfdae2b62b2b46a11121d7dd039163b8e4104 python3.11-test-3.11.13-10.el9_8.tuxcare.els3.aarch64.rpm 6405f335c8b55f5d33526ff11371bd9ab9c74e1e8394396be67a45204a9450ea python3.11-test-3.11.13-10.el9_8.tuxcare.els3.i686.rpm f7a10216fc9aa17d3d24b1ad83ca4d2f4ef9274efef26fe80ddfe580c75a4273 python3.11-test-3.11.13-10.el9_8.tuxcare.els3.x86_64.rpm 653d3d949fe520ae05fd3f6437d5dc38addb794a688586623daf7490c576dc82 python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els3.aarch64.rpm b4d46fe02f27de05240a9a1c6dc14a0077666da3580300351c78eb44a05d83a5 python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els3.i686.rpm 8cc6bd4dbed1333ef044b621061738a98582f5e0c1a58c8957ef9c4c5e63d4e9 python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els3.x86_64.rpm 9f6b3b8bc1a74f18b274e8624b151aee413c905427d07b84a7ec8a3c77aa02e9 CLSA-2026:1792213271 TuxCare License Agreement 0 - rebase to 9.16.23-40.el9_8.10 - drop the 3 TuxCare CVE backports; the vendor now ships their own patches for them - 13 TuxCare patches remain declared and applied None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 9.16.23-40.el9_8.10 - drop the 3 TuxCare CVE backports; the vendor now ships their own patches for them - 13 TuxCare patches remain declared and applied

0 tuxcare-almalinux9.8-esu bind-9.16.23-40.el9_8.10.tuxcare.els1.aarch64.rpm 2a0a677ab961841520b48720d546c059212d84e4d6e84dbc58827b7bd8ae5e94 bind-9.16.23-40.el9_8.10.tuxcare.els1.i686.rpm 8fa5d29f413750f9b97ba03d610c5dd092386ff9abb2cf4007d96195f9e0fc22 bind-9.16.23-40.el9_8.10.tuxcare.els1.x86_64.rpm c469e6275a2c0c7fdbc9f8f5090304f4b4db1cbca985d7a5661d82e0cec1951e bind-chroot-9.16.23-40.el9_8.10.tuxcare.els1.aarch64.rpm d9b454069c04011fcf2cc4deedbc1b15053ee322a0ee4b35a2b47cf5d3ce87a2 bind-chroot-9.16.23-40.el9_8.10.tuxcare.els1.i686.rpm 33cbb68434d4cfc4c23ab04c7fe9268fa25129622a0ed1b98ebe725715562e5e bind-chroot-9.16.23-40.el9_8.10.tuxcare.els1.x86_64.rpm 61c1a567abc31178bfea078de8d25efff7407606c11aebdf1d99186efb9e7dfa bind-devel-9.16.23-40.el9_8.10.tuxcare.els1.aarch64.rpm 1930da1fe89e763f419f9643ecdd20bf8e19f70845a3919ca90cc16e49d7594f bind-devel-9.16.23-40.el9_8.10.tuxcare.els1.i686.rpm 7a07b50eff0c0cd51c51b25b13a23b171b7588b7c63a077340afef17ff81ab05 bind-devel-9.16.23-40.el9_8.10.tuxcare.els1.x86_64.rpm 3606a8cda3db7cd3663684d50c0b5ec7d2b55e813756a2ddbf4d986bc0b02bf2 bind-dnssec-doc-9.16.23-40.el9_8.10.tuxcare.els1.noarch.rpm 51f895499538578f35f77766444e6d12f0847b202753e3606e34797fd99a98a3 bind-dnssec-utils-9.16.23-40.el9_8.10.tuxcare.els1.aarch64.rpm cdb17b872ab465d2f20a8097121b1ef1b4dc7f1b42dd03aecd69e1be3978abe3 bind-dnssec-utils-9.16.23-40.el9_8.10.tuxcare.els1.i686.rpm 523aefc93fa190c9d318daade477b656c4899311ee5a2f1ac881b12fd75b561c bind-dnssec-utils-9.16.23-40.el9_8.10.tuxcare.els1.x86_64.rpm 0f2e84f01d3b671cb176c28219e68960dcf05693815f4e894e0ff32aea062064 bind-doc-9.16.23-40.el9_8.10.tuxcare.els1.noarch.rpm 94f16e82eea802458e7fd2495d480057e25d4bb352a14b932ae4c22459dd9ad0 bind-libs-9.16.23-40.el9_8.10.tuxcare.els1.aarch64.rpm 61796f79f99d78dc7459a2ec979cff34827111701ef76040da3955db6f2d17e9 bind-libs-9.16.23-40.el9_8.10.tuxcare.els1.i686.rpm cb8d14762d010f0263804fd347a3b42ac5d99d9f905dae9a1c30969efd780d89 bind-libs-9.16.23-40.el9_8.10.tuxcare.els1.x86_64.rpm b6c883f393f125a8dee012dff5547921dd34118f7fc05bbaef281f58d064e4d8 bind-license-9.16.23-40.el9_8.10.tuxcare.els1.noarch.rpm 8485d5645eeeff4ab71ebe9d13e404ee7d493d0879f71b79254b6eddecb4ef44 bind-utils-9.16.23-40.el9_8.10.tuxcare.els1.aarch64.rpm 5e2bd91e072ccde8b815f114c87a64e73c603c85c2749c77378116d812c1a1a8 bind-utils-9.16.23-40.el9_8.10.tuxcare.els1.i686.rpm 87816784446978a4e46e8bb8fd0851fbfe4d8f6fa6916b9bef93f9f191f2f604 bind-utils-9.16.23-40.el9_8.10.tuxcare.els1.x86_64.rpm d27d3aab8a4535252fcfe1b8e0adc1a0a7c893fbaeef5107827dc81197dac175 python3-bind-9.16.23-40.el9_8.10.tuxcare.els1.noarch.rpm 7a9df40102fb147e2097939d9980dc333bc228a8bd24c1dc906fa5001175a67c CLSA-2026:1792501691 TuxCare License Agreement 0 - CVE-2026-65637: require an authority (an :authority pseudo header or a Host header) for every HTTP/2 request (upstream tomcat 9.0.121) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-65637: require an authority (an :authority pseudo header or a Host header) for every HTTP/2 request (upstream tomcat 9.0.121)

0 tuxcare-almalinux9.8-esu tomcat-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm cee08693d6a55ee0e6a1754c70f29ab7489cc300447236a89debc49efe5bdd2b tomcat-admin-webapps-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm f9bc63ec5f6a04529215ee1d3074cbf0ee328ae54738442b2be637c0f67febea tomcat-docs-webapp-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm 6cbbc02febe9a3180109c4a14c80b865a87eeb3f72376386b045183593451396 tomcat-el-3.0-api-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm 6159649f8302036b4f98b3822af59ccb01abb67e34bfaf4158b2d02c47744aeb tomcat-jsp-2.3-api-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm 81cb53897587c3edfd5e0361446cb35bed4da07d6e06f5b81a9b49fb53f3e698 tomcat-lib-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm b748a5ba7a811fb6a17eff14ad68f91313c3d0606e4bf7faea624d412137cb70 tomcat-servlet-4.0-api-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm 13b37594ed13bb9f33c7a0dc640f666710245f0080ea2ce5365b4314af07de27 tomcat-webapps-9.0.120-2.el9_8.tuxcare.els2.noarch.rpm 4c0c4b8cd98436fbb953865341e1da4c595f7667743510ed32ccbaf20b925e72 CLSA-2026:1792504115 TuxCare License Agreement 0 - Rebase onto the vendor's 1:1.1.1k-5.el9_8.6 sources - Drop the TuxCare CVE-2026-63072 patch; the vendor now ships its own fix (openssl-1.1.1-cve-2026-63072.patch, same upstream commit a0c8ec557d9c) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto the vendor's 1:1.1.1k-5.el9_8.6 sources - Drop the TuxCare CVE-2026-63072 patch; the vendor now ships its own fix (openssl-1.1.1-cve-2026-63072.patch, same upstream commit a0c8ec557d9c)

0 tuxcare-almalinux9.8-esu compat-openssl11-1.1.1k-5.el9_8.6.tuxcare.els1.aarch64.rpm 36ba867e54031039f6ae5cab0bfc37184f158a26e07f6df0f7f77f5ce5c39a5e compat-openssl11-1.1.1k-5.el9_8.6.tuxcare.els1.i686.rpm f87e0080762d6d55d8ab84246aea288cf0c8de5d212cb97a2fa29b5a0a91d366 compat-openssl11-1.1.1k-5.el9_8.6.tuxcare.els1.x86_64.rpm cf9dae9577656fd292744243cf1b5b086fde615081ba689938ffb8b876e4a626 CLSA-2026:1792506818 TuxCare License Agreement 0 - CVE-2025-64505: heap buffer over-read in png_do_quantize() - CVE-2026-34757: use-after-free in png_set_PLTE() and related setters Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-64505: heap buffer over-read in png_do_quantize() - CVE-2026-34757: use-after-free in png_set_PLTE() and related setters

0 tuxcare-almalinux9.8-esu libpng15-1.5.30-15.el9_8.1.tuxcare.els1.aarch64.rpm 4262e37007cc43664490e1f036a47e5597d8e76a687628bcd5f5a60aaa3ef9ff libpng15-1.5.30-15.el9_8.1.tuxcare.els1.i686.rpm fb42927930fd91ad5278fa7c7db5c8b7c580fb152314a5c5f1fdaf3791225f4d libpng15-1.5.30-15.el9_8.1.tuxcare.els1.x86_64.rpm 2cf53e919895f5f7044c18ca0c09cb633609db1573e4e230d46055ad842dad2a CLSA-2026:1792507348 TuxCare License Agreement 0 - CVE-2026-16527: missing client certificate check on the pmproxy REST API when -Q is set, allowing unauthenticated /store requests Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-16527: missing client certificate check on the pmproxy REST API when -Q is set, allowing unauthenticated /store requests

0 tuxcare-almalinux9.8-esu pcp-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 97498e0af48d6ed20017aa5b017f841cbcf287d9933de37c787d3acdaab5acd0 pcp-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 97ffa6c9e0248f5f621e1ce9436fab844ef2d8e5e34dcb9cf18ff5ba277d1f7e pcp-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 95617099d77c95eba167173b4a23bd5caeab20d324c0ec9588a1feb894cab8c3 pcp-conf-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 1fcb6f39db370385f51412651ba2b51e57f9b7a77c8c056ca4a77a84adc5e861 pcp-conf-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 9ac3ba0f30515c249d5af98d3c1bca4e7bf2485250098437e6f054d0eff919e6 pcp-conf-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm a1a8f2b8b9631724d24ab4f61b074f1d3c404c46d2132a0c230b5bee8db3f859 pcp-devel-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm d10335937385ce9f1a911c721e4e58ddc5a386a8576a57b4229ce2b5be213806 pcp-devel-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm f05d791edd6886c54547b0fa4321573d0596b68ea8ebd9062f7adc50ade6bbe1 pcp-devel-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm d6b4dda03d4e1976e6a8a10c4b88cc9501f77a6d2b63c054f5aca5fb690f50e1 pcp-doc-6.3.7-8.el9_8.4.tuxcare.els1.noarch.rpm 8e50c4140221444b7faddef2ed74c3247b78109ee29a6a6c4cbc3d9f682823e7 pcp-export-pcp2elasticsearch-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 71d6537ce84a2f9bf6e9f200a218e0180c20f6573fce47bda19f7cdbc65f6472 pcp-export-pcp2elasticsearch-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm d68f00698439e95dbef6d54ed46c05b7846a76be3e314bf30a41ddfe0bc9f055 pcp-export-pcp2elasticsearch-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 7fb7b4548ab41c7bc905ceed68ef45854043cd043b7bcec5bbc5c6d14e1357c5 pcp-export-pcp2graphite-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 9760c96ef1ebadc717d6aaa9349bb453f1b3f35e4998afcd5776c2f4532b7b99 pcp-export-pcp2graphite-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 6f7b01138d2b63ed02378fe210552f759f488c99d452399dee3a2989e30731d3 pcp-export-pcp2graphite-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 725f6971f9893d52caad1fd4872e65e0badac244bea9519aad796f0de4f0505a pcp-export-pcp2influxdb-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 97945261ea653e53c71837460112752697ff966ab1329706d0be52e8b0fc8ae8 pcp-export-pcp2influxdb-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 4b12f0d7492b946a64df28f00c910ea15059c0c5f34280db6117ded41f0f8e25 pcp-export-pcp2influxdb-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 75f779aefd74a308c96f84aaf7a76914e3f45c6aadcc57eff170066cac7e50c2 pcp-export-pcp2json-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 95dd07276a2b6d49bd144f28237f6f59bffc8e507184027851d358aa27490d38 pcp-export-pcp2json-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 9e8ac7bba2b83c80e933c0985c8073647b95417c2bd75645feea81cb93445a7b pcp-export-pcp2json-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm d5ac627bb308d9f4ae364357986dfa2a37767d2a12c99d3cb9ab1b2721231aa0 pcp-export-pcp2openmetrics-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 6b0b1cb199ffbe55c2efc55d2884fde8870fd2854de3248aaabced03b9f21ea4 pcp-export-pcp2openmetrics-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 749baf6bab8921b4cb006a353695cf3e2916b8d73741fa5ab7ec9e0768e3c251 pcp-export-pcp2openmetrics-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 8dd0fd81a8e409f74363c25d56413de2d9637cb6fa0f7accb3237ab15b1b8025 pcp-export-pcp2spark-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm df74e23869adf59b5b75b73c11a8a636df9e6c143dd564fb6746631ea0d23ab7 pcp-export-pcp2spark-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm c0595323999aac61d88a5b2d3a396152b3375bbae82a2f868592202bae871f94 pcp-export-pcp2spark-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm a736d98444445feb3f9f6fc27c74e73ff03a76e2cb35b91c27ddd1bde6fc94b0 pcp-export-pcp2xml-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 889821e9528a9216d71f8b62c5c2c04d29cd158b70f628e077057dc95c883cc0 pcp-export-pcp2xml-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 71f2b2ca39cc80a39948ec09deaccaea910befedd59c668e1b5a628d3c143924 pcp-export-pcp2xml-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 5b056415fafcef27bf5e07aacf4ec2c7ee5e4541a39c81ff66652ff5b62ecb87 pcp-export-pcp2zabbix-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 66a8f559891dc693cd754ad047ee9a0117bb2bcdbf97f8f04221068c98e0383e pcp-export-pcp2zabbix-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm f4363d27f52798788e7d58e5a77a33a1a3e24e3d82c7db07bfdfa01eeb02520a pcp-export-pcp2zabbix-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm f72be6a277408b5b346a742ccc10f4adca126bc851ea1264affd9e1eb436c9ca pcp-export-zabbix-agent-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 7e50dd55896c6bd7e99b46feed4a73ba8c7599d77fd3eb28f94fb80be4a63ac8 pcp-export-zabbix-agent-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm f1be897bec7e695a8595da41bd8e53de209a50f4b97deba7046bb1d9d2fd94af pcp-export-zabbix-agent-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 88c3be62919493a569e20c2134443edba997bdeefba36435bd7782a523dce784 pcp-geolocate-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm e7aa5a516294a589105a3178d46c6d08680550bc5e84ab2bace8d21e1e062a59 pcp-geolocate-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 6e83d1e629add332b2480b1c71014dea71f885772294bc2233152bae77908ad4 pcp-geolocate-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 667cfbe01428e3e5f868307fc6bddf5d99438c1f67323c5f2e2471e5068f2960 pcp-gui-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 44ca44ae32976f7aa89aebba1301b344589cc1ae2c2b15db5dee8e5559256b8d pcp-gui-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 6a5a20dc9165bad7a3c3efb89bafb73718e28726cb81eb70321b272681aa44f6 pcp-gui-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 5cfd66a0502b61d800a7791c431642b4c565e0eb79cf4b0f6ec8fdead4db2664 pcp-import-collectl2pcp-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm a630c17d1a72bc3269c91e0f4d7f14d9f25db9391393e654fbd8fd4f4b501a1a pcp-import-collectl2pcp-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 7050f17f950a81d1323e6a633ce948a41895222ddd2cc7db3954abe318b45295 pcp-import-collectl2pcp-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm f6fca01be5f6cf99e6154e8435719f189e6636d46ca30674b4c9d4a3854134f2 pcp-import-ganglia2pcp-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 6aa1e6641f2befc0144cbf5c76f4796b870c2bc82540e75f931c80b0e7016f19 pcp-import-ganglia2pcp-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 19959d7e4db6b1d83c2722a270563a2d289ae4c36c3f7053b37facb45ae3ba00 pcp-import-ganglia2pcp-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 090350086ad3bb0067edae70c283ffa8733ba0605530ef2d1e90f2462ae8e6f9 pcp-import-iostat2pcp-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 87c8c07e5c1f2c2eb70b065bf7284dc7677aeedf2718b430de32b2a03f4ad82c pcp-import-iostat2pcp-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 4ba6e9a8fb683aed278800b71c173af4ad2ed5f9938928f8ab2a522407f13c05 pcp-import-iostat2pcp-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm d6eab09d4f684db93967030c5a65a47e8d4688e153b32b71e17043d252b40485 pcp-import-mrtg2pcp-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm ced3c4f8478f22b62e440449aefa4c8aaaeb911658a99b5354f849595364ad4c pcp-import-mrtg2pcp-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 357bbcdb6e3956d3e0c95f86439f5a51f2a64a6eb3fd45348ab85751a9e6220a pcp-import-mrtg2pcp-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 7af592495d44e16769a139fe9e0d4f0451c1e9719fd0c6816f2799ec32f239fc pcp-import-sar2pcp-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm c5deb60817e721d80a5497bdca6d098f0a237d7a6cca6e641020758209dfa385 pcp-import-sar2pcp-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 6a5246244ab772e9600ccce6ad7f7361eb6fd4662477aad97d627e1dc3c11c26 pcp-import-sar2pcp-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm cc04fbdc44c52c2b796c4c56f828b8cbbdc95a13dc2c49aaf4ed116a7936970b pcp-libs-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 37d76edc8b6245352dcdefbd7e15bc6553552801f76357a393b53b8736d0ab8b pcp-libs-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm ffd70c23ff86f5aca30853f938d6c65bd54d6a01085ee815cb4af0e733146474 pcp-libs-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 7f0c08c53daa4d31f1cace518300448e2a84a5223ea014052516b892df72acb2 pcp-libs-devel-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 397147a926c5ce4575baf45a0a4016ed8a947c9a50cd8d9b909eef88c8c17b9e pcp-libs-devel-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 5b249888f3ca172fb57d49c76e9bd3a63a2657cb1f4a1da2893cbc16570ac453 pcp-libs-devel-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 71d02741b29d5c3dd1c9bc1a32f545898985c5f55259116bebca9cb103350d28 pcp-pmda-activemq-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 892842d51d6a6c20a23f8a0fede0a9b8da9efcd9dc36ea59b535531b76384970 pcp-pmda-activemq-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm a3600c69650360bea9e88e970af5942fa8b74cb7f451e3e5f4da45a894ea85b4 pcp-pmda-activemq-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 7f12450c350f03034b3b042ad445fa41eced57a6e215e218c0a1aa4148d79966 pcp-pmda-amdgpu-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 04ef7839a12ec3a2477b5d60fbe13810c5879a2de406336d82872ec434485995 pcp-pmda-amdgpu-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 58efce703c59eda3e1be233101847f765d32c2d8297609b9b65d51a66d7e04c7 pcp-pmda-amdgpu-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 036ba868b2f93f96495f7644210f3ab79db15cc822d6d62c9ffb97489a327c68 pcp-pmda-apache-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 867cbc451f84c25695545184e14e83003ae8a19139ef5973cf275d42869e8089 pcp-pmda-apache-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 870f24059f3ab41ff5eda4565b9634f1ef019596354172b0c61738b2bac5e965 pcp-pmda-apache-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 544116cd8c5eccc4740cba6426def139beb6e54701764d94c760f273c8378211 pcp-pmda-bash-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 2309e62651fcae025e6639fef1293908f7bf7e8a2ae5e31fe5c3c669770c04d3 pcp-pmda-bash-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm a36ad0b6eb74a65e2713d6ea53735a6e742fc29f5e84a07223d1df68847d2492 pcp-pmda-bash-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm c346d8ce0514b9db8a2dc528b751e089a420981d2815cac78904a9c125913776 pcp-pmda-bcc-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 928927f3eaa6e4c1155c1665208c16257ce728557ea730aa90d6d0de39908d0b pcp-pmda-bcc-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 49147f112b7227dfa1b2f6ce469fb2b18cf051a117021cc39bec7b86589a74ca pcp-pmda-bind2-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 830286a69a4e8ae0214f7bce4c0435249688d4f5e4c6852de324a9d30f48e8b3 pcp-pmda-bind2-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm d49dc1f0c76b5a8741e72fe10cc8e8c9aa238887a479d1840eaca895d9db0125 pcp-pmda-bind2-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 95e3806a1e7a7973a91133133c9c2966c14a4f29197328aab926ff9ad3d9892b pcp-pmda-bonding-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 5e80fc0e5feb5bb0227d321ab8d1db7d643159992d6c24d0935030468a6c8102 pcp-pmda-bonding-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 1c532000faa0a90b35a124cf03483a76523ee5b0304593da888eefa0b748b5c0 pcp-pmda-bonding-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 5fde4e4eeef6b1cdbc9af1b0d85f4f7aa9f968a97ce5d0aadceb899d856a1042 pcp-pmda-bpf-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 9a86231c81ee191edc37ff98886817cc5c89eab0791491276e122185e1c2081c pcp-pmda-bpf-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 3411811ee22aa09a5b8b0d689e749e7f88cf1e70e3ecaf07ac4fcb69ce230fdf pcp-pmda-bpftrace-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 5cfde81db0cc97b963e858422c5bd5da8159c03f7f909482d0ae1f4eaedbe222 pcp-pmda-bpftrace-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 2ea24592b03594dde2a25795bbedee207a3ce5a2c814e61963390b509382b6f2 pcp-pmda-cifs-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 6780cadb7ec1f2ad7cfbf078a12225f130439308d90690aa73875081b2e16d34 pcp-pmda-cifs-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm a93a7033d8479526c448754c3883f7bba3ec4ffd7d16f7e1c9bed14d739f8d28 pcp-pmda-cifs-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 9379e14583f0f0cc0aca4cc9e9157a6e46dcc089ba6f3f462e7f0af6614c5c1e pcp-pmda-cisco-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 20dc25decf48a946b979ab5847b09c934ead3b08c94707374f86f960c461e778 pcp-pmda-cisco-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 524dcd9987ebde5386cd131a5fb2f02a2e7b3463170e73bcef2b6447ced5833c pcp-pmda-cisco-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 0d6885e8ed0b8b93b36eb577f2142ccd0c446b4cbbcf23be4ee47714f2d9dbb9 pcp-pmda-dbping-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 4253c05515f3f86d34d7397b27287dd057e96d5657a1ab3f26b04e7fd6c451e3 pcp-pmda-dbping-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm a485cd022ab29faaba619352bf23b832aab78e436b01dc75926aaca6484c617a pcp-pmda-dbping-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm bb3bc2d777c8be4dcd41c00cfc25c63b5f4424b1d3e5a33df4e7d4e1a547e905 pcp-pmda-denki-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 2a90aee546bc12d6d8c4ff9fde1df72bd7501bd01cc9082e7031265fda949c7c pcp-pmda-denki-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 205a7acbe538233baee4580e9104ce4d0e5d4737d612feb3ad17548335abc7ef pcp-pmda-denki-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 5102f98ef3769a91d28b195ede5306447db0798e5b6356ab2af45676dbe37833 pcp-pmda-dm-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 03e97cb92f8da3798f13a98accf81dba5285f0acce21620d4fb692a255a8efa0 pcp-pmda-dm-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 1f762fb3cd50a277c8cdc2318390cf27d10863cebfc60a05d3a0d1803d277c11 pcp-pmda-dm-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 9807879c56a649199c37b773ba48a8458cc6329b3d2fee75683b690af23c2b06 pcp-pmda-docker-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 388c6be7a25588ab632539c32cd5f8322b26d0a4a8f6c81e278c3ee23ca19e13 pcp-pmda-docker-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 8c6ba04a850fc2c97a4b28deabca80794088eab62e2afa7ae3251eecab72d5d8 pcp-pmda-docker-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm c936e25e5ab3c5f1420d90b5515c97e0942d09cdef2f670747edb745643bbf13 pcp-pmda-ds389-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 10c37ab5bc5d04871addfe0ece21969b7e11c345eb327645d55f4eb61ec2ffdc pcp-pmda-ds389-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm edb8bc8fbd4302b4e3476d84a6431e989b514a50ab735d2e2485c26e671ee85e pcp-pmda-ds389-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 12a6dca8845a353ecc0430594e48f1abea9f805626027a3d472b26ba2b9cc2dd pcp-pmda-ds389log-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm b4df981314a62d4ea305a9098021a68ad0fccfcbd81cc282f42642e28f5bcd92 pcp-pmda-ds389log-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 63d145fb3f66d20c1ff438986fd2fda6564f846d778726f4c0868fb761857cb3 pcp-pmda-ds389log-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 56232c23c591435f4413d3d03bb6adaa0fc7b42e22503ab98f2a2ab1d73c4f9e pcp-pmda-elasticsearch-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 60e836d88f6d774c81e2534368cebe107f8f872b17939d8665583653e3d6f971 pcp-pmda-elasticsearch-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 42040f431b0ca6b5461ad0146bb5b1ec643a040cfcd2c5de87b35ca6a736fb09 pcp-pmda-elasticsearch-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 2d879b87eee18a7cc118430b65c0dee496e733fed71be899564a9a08429d8446 pcp-pmda-farm-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm a7daa2e5f69ab941e2673d5e2c99fa9a954cf9278a1afd103dd40f33fc134b86 pcp-pmda-farm-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 6a9dddbcc141b31a6af8d17e24d56471ded6bd7322fc3f05ec7dbf4ec4e9a2a8 pcp-pmda-farm-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm cb8896502efcb0ff09ecca796a1d88e620a71df7145ac8462a9f943d8169671c pcp-pmda-gfs2-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm d9cd1bf9785d5f80bb0950ede1ea4ffb0d9cdedbac37c6c1adf7619eb9cc74b9 pcp-pmda-gfs2-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 08c51c0405230333f7a28e3b6ab842022bf2b45ce10abee3fb658be891b3a8fe pcp-pmda-gfs2-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm e3c9d2ff0048baf75a6fce22c0cf5db983bcbc1b7326e9892ad7d527cfb1ef66 pcp-pmda-gluster-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm bd656d8d5052013b313268d4daf40aa4a308536f23c6f64e0b9b663897fd5eac pcp-pmda-gluster-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 9c7af354ee7a68966acb5b3aba220fab8f7631cec0429f7fe3652684f0248655 pcp-pmda-gluster-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 2063550e678f2195121dfabe314bf036f81d7d71d1fc06f691e263d5c1dd31e2 pcp-pmda-gpfs-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 18f7e6c17dd85723f28eb567c7943d37c901da2c7e8f70e5059328473f4e0a5b pcp-pmda-gpfs-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 8a353f4775e192d9d73ab40d8093d8fbbc8aef4c3cca238f1ddb72c007fb09c0 pcp-pmda-gpfs-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 7afbf91b42f0fe68307075b891a8c3ad5875eeee787426124cde625237c8c1b6 pcp-pmda-gpsd-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm b7eb31904114b0fd55a55d3880e9c391b6910da359e11654260622c9dc782d68 pcp-pmda-gpsd-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm ccdef59524ef369883e15dba382a605246e600331a21af3607d70dff40f17796 pcp-pmda-gpsd-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm b6b4340992aafa8f4ebcb90f1551bc7ffcecdded4e294295754c82e4413cc170 pcp-pmda-hacluster-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 94b5391cfd82d894022553eb32c8d3668fbb7c9542c3111cf7b3d11fb59d431e pcp-pmda-hacluster-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 2ee5c2044666b67c6f7badbd33338c0704684332538c1e5a70c851ea74d8e8bf pcp-pmda-hacluster-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 7feeb4f29abd51ad18b20d8d72d1a918298ef1895e5157a49e18b1bbe2c1343a pcp-pmda-haproxy-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 7cdcbf02ca95f65a9e1f15bc70e3c21a4267b68a580b4a4829c561e8301a78a1 pcp-pmda-haproxy-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm fe66c9d7aa4dcd59e66d20ba33dfb30f729a783d772c06ce8cec3afd1e8536b8 pcp-pmda-haproxy-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 7d504f6b3068985d7f603e43f12d11bc94588d5c46f1a436f0727a044c29995e pcp-pmda-infiniband-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 610ff60f76ebc56ca30df4c886ed96d80cbd5ba5b055b6b43bec2e4519f3134d pcp-pmda-infiniband-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 01703b948c50454f9b41bd667a32b7db9c15d32b391da6aab1ad1862b06bc320 pcp-pmda-infiniband-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 36c155b05646d60df4a3c259041b386315b4a2d8353248b4203fc489fafc74d5 pcp-pmda-json-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 731bf14a7058100b4e7dacb3dc17c08b19334a1930d671e4d2b984135179fcbf pcp-pmda-json-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 9ab532acd2ac90e02005abb01bc5954411afb92d511da95cfd6961f2627682b3 pcp-pmda-json-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 50938f7fe0893d7719b15ce7b6540d21cc1d132c0de318a9d857924d6865a447 pcp-pmda-libvirt-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm e81e8df1c3b0f7cb60038598f83d8d74623a2dac95325a5386e03d4bacf78a04 pcp-pmda-libvirt-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 586622ff61e156f6dec12fb9e89430208609090391a91e7a336a5ff9d1f845dc pcp-pmda-libvirt-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm f1e439f79e512b0735fcdd3d1a20fb1d6eb56d7c7bd107a52d2eacc6ad64dcd6 pcp-pmda-lio-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 65724f9cc731f1ed8a6906341bc81ccf0c677c85f6aeeba68db0b6a3c8524153 pcp-pmda-lio-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 537356ddc7a6d696a08c1c81824f3f90f1a90ff0869e25cf54df286885452697 pcp-pmda-lio-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 00c15f772e7fcb04ee340aa4b0af3c01a5782a6eefe4f215b7291f829f62bf02 pcp-pmda-lmsensors-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 227b6788977ac7a429ee18c283d6ad4dd3126dfd6a892f6ad485a158a82f816c pcp-pmda-lmsensors-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 0b26c7bbbe97fba6f50bc788ab0f9612a10ec735ad34bf794a9efe7d4013874d pcp-pmda-lmsensors-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 8b53eefecb333136808b842868606710ab49cecf64c15ba27440409f277f5a9f pcp-pmda-logger-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 56b2e0c619288952beb157cdd9fac36970623b22244ea6eb754480e2c9f1f847 pcp-pmda-logger-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm f91db6e6eb97a8cafb7525bfa9b7b79cbe0df4d8d8c9e79b66e24216f62e7cf6 pcp-pmda-logger-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 595dc8f1bad559297bb55d8ceff42ed7f0cf060f1e99252eac51693c352cf27b pcp-pmda-lustre-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 1a2291cd3bd2592a1f432e50d4ea61966fdcade984d540263307f2fd5e9bed42 pcp-pmda-lustre-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm bb2be8a02195a9602b9fc217615d55244b2fedd3291fd94f467c083c586843eb pcp-pmda-lustre-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 9511f37aedc6fe830d94ca55af12d865cb4f36c64510b58dc321d3c094232014 pcp-pmda-lustrecomm-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 2297f870ff8bb2bacd5605dffeac8078e6f08baa644d68b282eb9486e86d408c pcp-pmda-lustrecomm-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 32e1ff61022d330a62ceee92e7585c7f82a688ae12e7030204bca9e64ff08eff pcp-pmda-lustrecomm-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 3efe22f42ed270bf383d9c1141f81eea90b907c786e78811da4b1bc5ef92daf0 pcp-pmda-mailq-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 578595214152a7c21ab42c602eb2a99279d03b99f60a6b6f018d8fc911e7bbc0 pcp-pmda-mailq-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm fa8bed3f7f3750836e07c8adb348dee662fff9cd1a828038fd24dc62f4998615 pcp-pmda-mailq-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm f72d8aaff2f33369914a5a1b223cd67b51d4e3c625d0e1827d04890267dd33ed pcp-pmda-memcache-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 58f47a76609879e9de2b7610a145d5c258167c74ac2a90c537b34f15ed332e5d pcp-pmda-memcache-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm e82ae63d08eac8bab8afd90791c26a3b666a740e7c89a0f8061f9b43e0febc77 pcp-pmda-memcache-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 80c90a42f29d762cf960029cb0c281c9946ec6add291c3df1d77dc1d92cbd271 pcp-pmda-mic-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 65a4bf6fdc0e80b35f5cdf36979dd9747a1a43e83ecb7a65e1e79d4d4733d555 pcp-pmda-mic-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 19e18f31f36d05becdc2fb86bb34d40de8615ed4eb9fd98e54f0cb74afe9181f pcp-pmda-mic-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm e6fae417c8a09f9d8607eb68f64844254410bbb71884037ee6f236f44ac07085 pcp-pmda-mongodb-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm ddbbd076f8ec551e596b4fa8e6a4f30baac04841a19ab85b413b2d1b6bbe71ab pcp-pmda-mongodb-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 6d45e1a342f1c2f74c9f3e5b3eaef17a531e637cb0a28fccbc03bb1c859eee95 pcp-pmda-mongodb-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm d7d3d2dbb9f423d629a394ef8bc9d8681beac9661b21c6d9ff4d824950dabba1 pcp-pmda-mounts-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 00a617da01d0b2738d4f13a44af4b1d69deee0a74e2af0435fe380f69aeacd1e pcp-pmda-mounts-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm fd476e47cc3820f80e540d38c89e961f501d4c1582537ab86c490466ed72049a pcp-pmda-mounts-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm fa94cd4a5eaca7690c999457acbe66c5102dcf562d556fc47b3bc6ebc69f19d8 pcp-pmda-mssql-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm f7df4fb90248b36921173c656faad50411b61c2a00fc0848903cd878e5d75df4 pcp-pmda-mysql-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 7b84a58fe955ea15ab09eab66c21e27e4f94ead08d761ce14aef2de689230f8c pcp-pmda-mysql-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 2e28435c8491bfd1104466b102b232c0c9211f664a8ccae75e302256df1e390d pcp-pmda-named-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm a03042bdc5c061213a50ed86aab516088c7232f6587c4e6da49e34e46aea8080 pcp-pmda-named-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm a7cc9b5a2dc502c16b21def11b05f20c435ce05a5ef2b98353a5d88689a7c6e6 pcp-pmda-named-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 41371b5f3dad6aba0abe7e5ac1dcc53936cc2a629fc092387f933a1b5b51345f pcp-pmda-netcheck-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 2714b4a5afb63bb09b69004e6fbda8511b24dfe170200a08971e1f0093477b88 pcp-pmda-netcheck-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm de1f4d6d59bd70453ee08b71cf682448f6c838cbf6de47a4133b0710d85508f5 pcp-pmda-netcheck-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 7f713dad216e3c9f20294f01ece8e3081960bae68e828adf32f225c7c922796d pcp-pmda-netfilter-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 2d81ca3b6bb5ff0105c366f8df381f8a44d0a3f0886c26f7155d1ec4ac571a48 pcp-pmda-netfilter-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm d57ec0629d8c946b5c95ae62eed5cae9e66db22c754a8c2f11b49defdbef48a4 pcp-pmda-netfilter-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 7ba47340aad7fa1885f812b137c3cf5db70893980a0f9343de6eaaddb527b22c pcp-pmda-news-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 894ec9c306b5ea87f1b24ce1f1de57de8018f34a97599b2f910f9de4b9caa0eb pcp-pmda-news-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 4105dee73a93a4e9a3ca2d826dd17c9d2969da4bd063bc658899419729ef06cd pcp-pmda-news-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm f3f3387b23cf18f36a10838abe1ae227f9f870ca11bb40a015571e511c1d1572 pcp-pmda-nfsclient-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 6a4fe59bc7273d30718cd7d977f764ffb239d8d84fb5f876204ece21aece5e4e pcp-pmda-nfsclient-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 18af741c16bd803bdcdb35b508d0accff242bf9230be8350e22ea055d61f3f30 pcp-pmda-nfsclient-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm e36a600d30563982b5a04c0ee655982df1254086ae2b260ee0814d9c6f76c6be pcp-pmda-nginx-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm f3c371fdba2134942dfcc15c7c55efd86724f800e1b16b3e3c274fa8185e6611 pcp-pmda-nginx-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm acb664eafe4df0558051bb2517e756a02b9c1d997508ff757b157d97ed048f21 pcp-pmda-nginx-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 8f993e6024f12eb3abc32be518427341369785d8a38ac3c71c4d1915e66439a4 pcp-pmda-nvidia-gpu-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm fa2a8542fbe260bd6ceaba92bc7c4cba17edbf1f77c6a592fe6bd60c08ab4936 pcp-pmda-nvidia-gpu-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 9d2425749f7921b8743e0ded5b77da82bc4e4dcabb131a2a8e90c4395178987f pcp-pmda-nvidia-gpu-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm baa38e59bb36610c53a1b3fcbc1bd47f8ff3cd242917fd51fe7355e325b79591 pcp-pmda-openmetrics-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm f5cb53465fd64d7df1e11a4db99f97aee1bfadb2c74f7b32525e51dd20d6f339 pcp-pmda-openmetrics-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm dcc3e89e531a1f2a202686aae5fb55c962c754330189296f7d85b39ebd68c9cb pcp-pmda-openmetrics-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 268babc75b9b69e170ee8bf486c2f13ba9171059fabe151135a1dd7011ab985b pcp-pmda-openvswitch-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 3782a492d3f0df625e5af48b2057525b620479578a13f70d24b7bc894cc63867 pcp-pmda-openvswitch-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 4aa0f5a118f4a5bdd007b975303e484558e4b2d7e6ece9f8118a64e7622c2b30 pcp-pmda-openvswitch-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 6cc9bf88e4d0403e6457c5400dff4886372449023da37fac310cc90c9dc537b1 pcp-pmda-oracle-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 54a8b03235d7dac5686ba1542c8d10632cde0d566adce39de6bf875c3a0b47f0 pcp-pmda-oracle-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 5d02829d78f71625ac660d627d5fdfff0a76d2b7fa8b38a8e68ae16c658af092 pcp-pmda-oracle-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm d40082d68bdfc6d09153a4f3003fb6b4a1374d30b1e28e7c6f496ecba4422d1d pcp-pmda-pdns-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm fd14a5e960b7c8df29f54fadbe4153730ae4991fdc3cf0f4cc9c62282025b1ff pcp-pmda-pdns-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 025bb0938289b4aa5c658bab8a6b53c4c8f045c1d07375bc31b21d28b83b42db pcp-pmda-pdns-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 219433838d047937ddb4e8d7daffdd319e06936bd646e23c8363fd55ce268f38 pcp-pmda-perfevent-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 4c30f921450d1622b50988e40a1751544db40655060334b6f4ec8722d3661c3e pcp-pmda-perfevent-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm d7137f91ec15bc791f144afe50557dca316a778f7be4d0216517774ab9977eca pcp-pmda-perfevent-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 74fa3623d651bd850b334ed34170bfd5c1655237200f5cf061a93f639eeed86d pcp-pmda-podman-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 313e7b536f8721f2bfbbba0df20543f842cbd6cf44147262086850afb1ab6103 pcp-pmda-podman-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm bf898da8c1bfb0dae4c3b5dd52edcf86f2cd9b1924842308173cdb903f476193 pcp-pmda-podman-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 2d7af2702dd988bab350c938d066a50bf0719a4348f12c3673035d0a1a7bd915 pcp-pmda-postfix-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 4f89934df7b1bc6400c96403b05b400a31d2b397f3f154dc60e307a575882272 pcp-pmda-postfix-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 15565cbdfedd9d33a6157dd5d1eacbbc3959270ae203036ee87c03c4328bb299 pcp-pmda-postfix-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 926b427001761b76fa4383a414b33acc8f726a526940e3a500552360103eb39a pcp-pmda-postgresql-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 6a4ce804db28ce162acb4630b6d892f484d51492c00f7b99f390788a680253fe pcp-pmda-postgresql-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 84867e19dbb2be955a6d7f5d6954b010dd49a93b61627ecdad7fdafdb792c20e pcp-pmda-postgresql-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 5bc23c355996f9e50dce4830957ba3e7e1c29071857015d3f19fc15ffc602972 pcp-pmda-rabbitmq-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 04866ca3a62d067713475f3aa754c3f259d89c90bbf76bf823f1b23b2ae8fe53 pcp-pmda-rabbitmq-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 439f33ec591b6c116e9c9cdf1ba2d3708f31674e26c33e8a248e1e33482985d0 pcp-pmda-rabbitmq-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm fb63a5f535bdf7f1559b22433f7f854bffd2f5ef61512afe3e482ba4b89e361c pcp-pmda-redis-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm fa85d964d33ea1216b5d9a06de60497b6c365e0fab13def4992a4bb3e3af8548 pcp-pmda-redis-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm b0f6ba43801e72713461b81c0ed0f67a72aa424dd6b5f5bc2a0e06f3034ee841 pcp-pmda-redis-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm c8e24b4a2b79321483b32d2a6a78e8bd4223477072507cd500e9d00eb6566c5c pcp-pmda-resctrl-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 7227ad7553fc78f06011a80b00b2fbb6f3f5835c730379fd631fd4544296d285 pcp-pmda-roomtemp-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 4298b11eaf82254bddc2ff733d0a35f7c668fb53cf2b283292e5f6dabd6bbce1 pcp-pmda-roomtemp-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 88fd5f1270200067aa43762e448f5d539d08a6d19179f912c6839efd13fdc276 pcp-pmda-roomtemp-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 5585e9cf16afc9bdd42a529e48e0ad580eeb13ee461a96909d0aa7a090324824 pcp-pmda-rsyslog-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm cea2509bd24a000ea0ce31852beff4abc6daf2ed6bb733175ae602c255ac9e67 pcp-pmda-rsyslog-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm b61759ae26be723928ba1623240ab1e6da6e4ab5144398a647c5e2f8575b815b pcp-pmda-rsyslog-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 89267dbf041a89aff5f857f2da07df7f91f78201e511f79e3c35c1d4b28a4c2a pcp-pmda-samba-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 5b11d11d2fa1ef3318facab67a650ed38f71b60e2521ee03bd47815de9f6b457 pcp-pmda-samba-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 343a853e44d003bc843cb37ae68b1e10d8194ef8a77b6f2e01020a7ac9544541 pcp-pmda-samba-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 3ee951ed4161f7326d9611d28180ad441054760b79a7ee47c6ae28411696e98e pcp-pmda-sendmail-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 867e2ae04cf0a69fd3d2ba6442f48fc07214f4bb59f31ec21a3392c081784af3 pcp-pmda-sendmail-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 120f39fdd8b9f8b2b3a880ec2c8d4177b0a6b06fb3f8b3b4c723c862ac8fcd29 pcp-pmda-sendmail-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 6a00f93fbf0d2ce59974c6ffbc4da4d58dbda78b17d56023377fd4d5b2897f1f pcp-pmda-shping-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm aac738b22c098c033fbc070db3f0ab542f931eb5646a4448bac1d5e61706e726 pcp-pmda-shping-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 897f9206158d679ac3007f77424a599bbcbe0b2c38d0d1fc80b8e07ac67e34f8 pcp-pmda-shping-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 61458f4d903e417435380d187238acfe2270dcc1f071596e6ab69d5ba9cd10e6 pcp-pmda-slurm-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 607a27b440fc67cbd615f7452f485696697157f2a7d5d6530b165594a87c4546 pcp-pmda-slurm-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm aecc09f63640ab769e97e9eb0cb3e785727ddf2874750286f93f28354d576d09 pcp-pmda-slurm-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 8de59379f117f26b5833e7ebdad65b3a9bc00efd1fa1e971bd6b9a7273064e43 pcp-pmda-smart-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm f1dd445d7e5ce95e9be7b7e2210986dbe4732c62742fd206f4e912847b657f80 pcp-pmda-smart-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 96829bf4103ffffcd4080e9487a7ba5f13a8dcab2e36c2c13808eb46d94021ca pcp-pmda-smart-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm d4d66d3f8999bdc83caac43d7ba9c0a1177cace3cc096071f2000e9ecc23f22d pcp-pmda-snmp-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm c0c92e55280b1f463c4ba73cbe316bcd383ae861e78e29bc199ffb0f2d91201c pcp-pmda-snmp-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 45bf0074e7f92333a14d9e97af7a59d8c036d5649208019017fefd78260a22aa pcp-pmda-snmp-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 60d300c64e4d54918d92a49a561527cfa2e4bd917999014178cdde7d9de69d62 pcp-pmda-sockets-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 4c236d9cd9d8924f459d6c3a118dc0ba66a80d4003b6cc6c88acbe358b64d38e pcp-pmda-sockets-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 8f559a3d1fff787f2cdd0c46572a5f0c06f2fdc8280f5fc516c84572b9fd6faf pcp-pmda-sockets-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm e6fb77f1645871e00df204cd3f0457d2d9d8d6649b69b19cc686094e3216c5ee pcp-pmda-statsd-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm a1f1ca020abd00831d2d06361dfd9ec3e32624494967ec7e53ba31de811edd41 pcp-pmda-statsd-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm df7d90e8ab6531b3b0ecdb95881a33ece0a31f785267e0ca4b47da244a221e71 pcp-pmda-statsd-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 1e817e6a7c4a3540625b9ec00fdfd9673cbde8673f9cffe27a61fa9b1de77885 pcp-pmda-summary-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 95b10b9f3f4d89adf52d0b09a8deca747bf47228728be069574b51ee14768052 pcp-pmda-summary-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 2c1298e64bd9fd384ecde59c72b19ad5766d9c2d162f0a90280c2981e6704eb9 pcp-pmda-summary-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm b6847da60483cd5bb5f48562c23f38288fb108151f55f540c46eb30a4a36131d pcp-pmda-systemd-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 72f4f36998944d31ffdc19f86b00f7e2cf1bf54499bdd884cd3b1da8bb8cdefd pcp-pmda-systemd-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 83bec03e091a708489a42af63effce32500f3a522bd4b408f1bfe29cb8ff2179 pcp-pmda-systemd-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 836f57515e552bd95fdd5bc6635bba7053a46fb9aa69119f3b2d5cd95670a01f pcp-pmda-trace-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 2676ff0c8ceb4ce38cd97440e673a33ff6cbd7ea9a47c444476a3f53e88b892d pcp-pmda-trace-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 2182da804f0fe0ef8f0423343dea80eda59047fd0e9fb782fd7e4a4416c6306c pcp-pmda-trace-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 92ea20dc739e8d10b3e150de5dc000e004705361c9dd73e5a5df79d98adbb946 pcp-pmda-unbound-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 7d9f46e07c9a630adc62931323b06dc356e251189957465340a6c66d39e824e6 pcp-pmda-unbound-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 05cf2be47e4d98b811171dd0026e733997caedc5622b60b075c2917a458ad1a6 pcp-pmda-unbound-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 859fea8a408969b48ca259e1884dbb6c73eea2ff0d113e5629167a812e1bd04b pcp-pmda-uwsgi-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 4d82211f5d59bb0d372546d831f1683e62536290c38f546b4c7b13e237ed77c8 pcp-pmda-uwsgi-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 7623be3290299f60b669dd7dc79dcc116c541aefbb1802e27c513489a8ac7783 pcp-pmda-uwsgi-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 5b212294b1b170e00874fd56f2e41c6a2e0e5544fe6e528673b33d8cb7857015 pcp-pmda-weblog-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 2bcd5490fc8825bb0129fbd882b83639813aecba914df89971f8e50711baa8a6 pcp-pmda-weblog-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 0144f75e4e83dc2684ca501003c384732483b51a3af59c5dd0a4a32e6f1587c0 pcp-pmda-weblog-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 610faad4548a4a3d7ea6949a7868a80d57a2116476a4be4a16971c8d248f49a9 pcp-pmda-zimbra-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 8d138781004b624a4d49b8ea5c15c52405460eebe26ea88472d66c1c97ee29f6 pcp-pmda-zimbra-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 0a8a46a88d4fbc2f68ce671ecd2c4bbfce4dcc5eb7030c0983febf19a51582d1 pcp-pmda-zimbra-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 20fe93d8bf7be8ba7a38cc6a5c55ea8f9ff4e04c37b9b289f2f798ab322f68fa pcp-pmda-zswap-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm df55634bfa434e6b220adbce40f908999394b78c22fad1fd611da43024be8085 pcp-pmda-zswap-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 5b2c787fc50b2b394ce54030be302ece17690fda44957a043b141816636929ac pcp-pmda-zswap-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm ded48a03e56fb5796165494f175af71dadeead73fa30931aa8694fc847b786ad pcp-selinux-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 88487ef28ee34c7736076b4e6187f3785623fb26dbde8ae16a155ad9573b7f42 pcp-selinux-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm c5bba52a432015c3baaf6dfa4843aadbf91f1150c1cd3fd1e894f891f7ed6e74 pcp-selinux-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 0be3d61d2721ed23d44530ce41aaab067e91a3f5d6c8c031ed11f155076986f3 pcp-system-tools-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 5932f8b302594725bf94725688913277bad5fb7d64108b22e946162033e75f53 pcp-system-tools-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm c596a3f14ad7c72a55d0cad3f5e6491a4104eb5bf656eccfa305ac87feb948ae pcp-system-tools-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm fd909571609b281b01db74e927a73d9206e87d0a0f25b925c7f45db67c7ec2b1 pcp-testsuite-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 1cccfe0538c6fbdb811d3a9638aa16239a2d2376e08fca6e2b5a0125e20268e2 pcp-testsuite-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 11b25ef5feec1713072dd6791f86808b8d88409aa77a1ef4dba31d2eee540abf pcp-testsuite-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 680634a9aeeafad91da1e2e12e294af6183217447bd2143ad5c27c64582959da pcp-zeroconf-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 110cc729cbd2892e37e2f360565517703af911807345be3438e9ce4bc7de7348 pcp-zeroconf-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 22d85928de425ab62174e709eab462697d8fda5d84f72f7dd35cc85fc850f91f pcp-zeroconf-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 89fbea9346baa666a7f0f3bfbb3ec53e97c68346990170ec4ac1e2380541efbf perl-PCP-LogImport-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 680f1e6ea8850af9772172724ef73f5db5acaac8f86f7bba593162e5d36c9e37 perl-PCP-LogImport-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm dab339cc970e9ef278244d78c58fbff3b1727bed6a89321239b219886569c505 perl-PCP-LogImport-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 6dabc70c6a5b873bdf6bd870390351b2830f3222055b5ae8eff209b2a0e18e50 perl-PCP-LogSummary-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 5ff8a285856bdbaee219860669efc8bceb522bcc28d629cd3805fd35718d3d27 perl-PCP-LogSummary-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm b8a32674234c9a861b6e0739710d10e8e1a8284f0a5929824fc559178e7fe912 perl-PCP-LogSummary-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 1069ca3eed661ea924a6034d2b4e74d417beef2fd42f76aaef2c4824c3cd3627 perl-PCP-MMV-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm b74d8042aa683603e9d62f98d624d342a76e929b7aa8756b6b880903f09b3032 perl-PCP-MMV-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm e41a23945bfd65ae32e09394945bde4f1b78a3f825e6a194f72bcd8624d171d7 perl-PCP-MMV-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm a7dc7353a15cce43a2fdab62e6f77351104d2a494200d909ca93572fb8079eba perl-PCP-PMDA-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm bec0b38a7dfeed2d9972f80fa2da400cc1f99d6ea16295cfd29da400baa508d2 perl-PCP-PMDA-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm eef0c5145a211eadf058f5060be1bbd1daeb00db2728f8d8c8b5bc41f1fb4bbb perl-PCP-PMDA-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 49bce501fca0fd2e60434ffd85e0ffb28b55549c77970722270edd818b92b272 python3-pcp-6.3.7-8.el9_8.4.tuxcare.els1.aarch64.rpm 95f40d4062035177e9203222fbafb82ae237492bb32740775301402c54352226 python3-pcp-6.3.7-8.el9_8.4.tuxcare.els1.i686.rpm 772b26369009c268dad188733eb54d6c6dff2cc7866bd7221522bbc30b7665f0 python3-pcp-6.3.7-8.el9_8.4.tuxcare.els1.x86_64.rpm 714f03e57ab8c1ae23d928340efe1744156222ab7fee7083b42bce92c9dc3ca9 CLSA-2026:1791455349 TuxCare License Agreement 0 - CVE-2023-39742: fix a null pointer read in getarg.c when an option is missing its parameters - CVE-2023-48161: fix a heap out-of-bounds read of the color map in gif2rgb multi-file output Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-39742: fix a null pointer read in getarg.c when an option is missing its parameters - CVE-2023-48161: fix a heap out-of-bounds read of the color map in gif2rgb multi-file output

0 tuxcare-almalinux9.8-esu giflib-5.2.1-10.el9_8.2.tuxcare.els1.aarch64.rpm 28988950b50dcc0f8398f4e71ca9223cb31d630582639ff3e053dda90fc6bddf giflib-5.2.1-10.el9_8.2.tuxcare.els1.i686.rpm 23bbb89cccf9e091a758ad16bedfac7f3b0b453544219858046675900147dc4a giflib-5.2.1-10.el9_8.2.tuxcare.els1.x86_64.rpm 1b08028ca98acacaf1cca8f4886909b6038971568ec4edd89c883e0ce67d181b giflib-devel-5.2.1-10.el9_8.2.tuxcare.els1.aarch64.rpm 8bca82ddcd1e0e91a393f6a71a673fda7e4269419decc6edf669972e760ef277 giflib-devel-5.2.1-10.el9_8.2.tuxcare.els1.i686.rpm 88395b842c57ee65e7734e3acd1b97760e61a096ee96460a36c720e46532e585 giflib-devel-5.2.1-10.el9_8.2.tuxcare.els1.x86_64.rpm 83870694a4421eb92da7f5baa092bf1ed44c3ed0161121684d23a931622672e1 giflib-utils-5.2.1-10.el9_8.2.tuxcare.els1.aarch64.rpm 53c10f7bb07e9ce187d8371e343f3285c3b03ce0d0cbeca1743833b4171e31d8 giflib-utils-5.2.1-10.el9_8.2.tuxcare.els1.i686.rpm db00e1577ee7b929c76c84a79271ca994ae8aae6f733dca97e1e600528268c41 giflib-utils-5.2.1-10.el9_8.2.tuxcare.els1.x86_64.rpm da9aaa5f6fe80e5ac35825855f872a64d68ea1c5a6ae4fee655df898bcc497a5 CLSA-2026:1792512801 TuxCare License Agreement 0 - CVE-2026-6245: out-of-bounds read in pam_passkey_child_read_data() - CVE-2026-12610: use-after-free of the certmap context in p11_child_done() - CVE-2026-68742: out-of-bounds read in sss_nss_protocol_parse_addr() - CVE-2026-68743: out-of-bounds read in extract_authtok_v1() - CVE-2026-90462: access granted on zero results in the LDAP ppolicy check - CVE-2026-90996: empty-body underflow in the NSS request parsers Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6245: out-of-bounds read in pam_passkey_child_read_data() - CVE-2026-12610: use-after-free of the certmap context in p11_child_done() - CVE-2026-68742: out-of-bounds read in sss_nss_protocol_parse_addr() - CVE-2026-68743: out-of-bounds read in extract_authtok_v1() - CVE-2026-90462: access granted on zero results in the LDAP ppolicy check - CVE-2026-90996: empty-body underflow in the NSS request parsers

0 tuxcare-almalinux9.8-esu libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm c5e5ab60a8e24083f495a33229467a1e93a9ba070464527ee10c941d3ce6fd30 libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 86f95a8e0217e4b1b2bcc9227cdfea7b782da988a1e5ccadf9387c68ba8c7dc1 libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 2cd6140f009ec4cd920aaba68756ba2bd1bf4ce4880093cf54a54226fc80bd44 libipa_hbac-devel-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm f29615fcd437aaedb3ce9897ea74646846184e1e3c097b78bdf9d8cecbda5fa8 libipa_hbac-devel-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 2b53e34153486a6599391748fda4ed417ea39adf8c1d9cb2456cb59af6053713 libipa_hbac-devel-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 271f8a6ee8960c756e2a17159f544b51d382ef6f66b5695968d56b9e6bb3ced0 libsss_autofs-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm f3d8ac13da704c4b022fb11e48b0608c82218aedbe576200a74061d466d29850 libsss_autofs-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm e83d97104b187385b8b0119f46428a9bfaa367f5f781e47499988a41f85c0520 libsss_autofs-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 65145026ce0032b28a9014c9432367d0a3e6d0b41061944577cfa2c196dabfee libsss_certmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm ee8c82c5e5593e6c0748a3ede814f00f6d7075ad22874f073861368eaae55f9d libsss_certmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 60bfe39a841089e818bd4fbdfac1880523b931f4859eaff6d58a15c7f5e5208e libsss_certmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 1febae13110bc20776ecabc3c81f6a79de1ea2743bc589681af85c6e9affea6b libsss_certmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 1e053dcf84c6151d96f1d598b3d36fa05820ef572ef9bceb96ef94586f730687 libsss_certmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm a73398582c6b9487205b182e85c1843a8579b1188b98c5f2d44bcd1b173114e2 libsss_certmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 62d72a22cbb44d2a4df0b343c83cdac86acf5e38dccc47d809d3965d1b433711 libsss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm f13679232f56134a697d9109e71bcde0f81cd86182c96be1eeb40e6ebe7975e1 libsss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm d4b0bde341874e5e78f65d04a8649cc645b98b29716d0fd9fbc6a29fc514079e libsss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm dc69e494d10d761bb819cd89ecdf6aa9b3a4accf83e4128cb1158e80054b259c libsss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 0db655f038f944a4f2493d9a1bf4087c28536f84c7d052c773da8d599e7f3021 libsss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 1e68bc2cd0db6fcff77e7660c15a73b794f36d00c6782202d48e2584465c0516 libsss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 94cfd556412ed0b7f0dbe794e7e2f61bb228e885b799ea2ab2ef88a8f803a00e libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm b4ad0aeb967a337a98ee63dab6d21940ab0ad8c829793ab9972c07124058eaea libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm b024bf2638aa8d0b3c420de32b9e23977d9f2c62e24ca5f9d030e24299f7d857 libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 4a544891ec6fea9ed9f96c1500dac6d3c0cbbe0b46be3ed9aa84858db92e4d4c libsss_nss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm ad5fc64f86b1adb4cb2ee18ad19fc49bd1b54716b2ece96954762152c43f737e libsss_nss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 740514eefb7be5e990edc71e05559195070c4533d158b31062b5b17bd62f8d05 libsss_nss_idmap-devel-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 6f1dfc011a05d187f37a929054727790f764a6325efd4bf643616c02c6967ab1 libsss_simpleifp-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm bbef0e19cba7e5238e4db7402a6ab5c5aa92df3dd93197142a5436f6502f2283 libsss_simpleifp-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 0876bb1ad0169376b136b85f63934007dcaca39b7a7ebb00400454f44f8272aa libsss_simpleifp-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm eaef4317817d98a00ad4b8d03a1b2eb4f432b6a5663e052681e195f8abd6f026 libsss_simpleifp-devel-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 36b9876b21faa94922544c8edb517afc9bbeba0860c92826885a1e4db6bb7e86 libsss_simpleifp-devel-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 1c1067354d50ec7d9ad5039388e7936c59abebd3a7fddab3bb5742e4520c14a9 libsss_simpleifp-devel-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm e85395b4608c3a26d88929aa027721d7f9ff820d447332371c5bf2563c2caf77 libsss_sudo-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm ffcf064c5690300da43667dc38e9a30b542ae3ad278e9f4f9d6f7deef354e64a libsss_sudo-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm f4e870e999bfef0f7eed6ba4b09cb1362bf9ccce5b9b5d4c413a3a03f2d9aa91 libsss_sudo-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 77ba9cd01092f02681f2d780ad047ca07f41120da759a375a6ca8933e20136fd python3-libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm fefaf5d228b360f84514f7dcf594bd0ba1dc4d4883e86f973f3ad19b52e10813 python3-libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 151e39d6bd54d0501c27eb09a082747f5fa7342b112806b95f0c880a5accc3d2 python3-libipa_hbac-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm d72ee6ab5b3504a8d1922e34f35e0d9234148ea85cc9dcbc2d47a7accb5b1938 python3-libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 0b3c86b3230767cb14d1ef8d6c7cc5f22b8d3b679b442ab3c369747270f592df python3-libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm fde05088f0f1167113e57ffc99ff50c0421ef1c1f1c691dc740385a85b4c4245 python3-libsss_nss_idmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 909b7668b0fcaaa3eae12435fcef5ecfaa7ccd1a0c118fd545f268de9a3575d0 python3-sss-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm e0d0dc26e67003bb80b212bbb1ea454817ba0901311d20365295b6ac6ca9247d python3-sss-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 0aaee8c792dda0ecbd4d5641c2a6f8603a42898470448715a87a0a7b4300df14 python3-sss-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 25b53ab8fbb67ee06495be1af0b2a1dbe2160eddf00a50211f3a124421f12554 python3-sss-murmur-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 405ee1c9d5436ccc7c1ff00c4966f38ea406fbcde56f56edc56cb1b56124ecb9 python3-sss-murmur-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm cfc868f61a3bd9cf4067a22d04d8b3bb7da4046fb8a75a398daa5a7576541ee9 python3-sss-murmur-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 8ff863bde39704834f5a47b139a52511aea8f74e1f8699aecc5cdbeb6e60a8c9 python3-sssdconfig-2.9.8-4.el9_8.1.tuxcare.els1.noarch.rpm 9302158ad4e4dcc2bce25d17831d96a7e947f04ae823d3e6d6ab2d082b8b01f6 sssd-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 1f065c4396d904a0bcccb0ca726e1f7aa68c6753ba2ea2ac8d40cb9cb4715bf6 sssd-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 4b9cba155b22c6c7c8f1dd5dc01ba0f0790ece86fa5515fdff3f41b24fb4c6cb sssd-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 43cd7f8d37da96fd857d6952d3cfa11ffc1d2fc3e09f4910bbbd67852b066b7f sssd-ad-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 388449c95b46911db750d33f187c8159b308ce04b35a81bedf3c30ace2037dc7 sssd-ad-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 7cd5572d0be4c327739616b89d28071ff13027487c4af80c3475641c1f4d1ebf sssd-ad-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 3e98ab01999130acb7886dc71613b2322cd7c01a84531c977d7055d89bb3da4c sssd-client-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 65ac77d2ba1f38fff2894616039794057298b55582ceb529b694b63a38dcac07 sssd-client-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 99855f1dc4540d657d47b70e1f7c668a87d962264388b82f0bb4639f0a94914c sssd-client-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 6b58c52b2e483c4bd28b0e8e14f31e29ed9f7315946c315ae52508afe69f5511 sssd-common-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm ff1fac2aa93288ca6e8e9e42f1ae9f5c0900d181b8c5bf893e4a8f5ea291c557 sssd-common-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 8cdbfbfb2ed1f27dd9032472006c916a420f1be27214ad079648c5eecca2c7c3 sssd-common-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm c09c0856853d1098e86d9882f24eedd3fe721d873601387432baa62754ec3dd6 sssd-common-pac-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 755d23bcccadb2199cac79762df65c89a7951d734241e21a950a3260f4cbd6ad sssd-common-pac-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm ca673b7c73e339582ecbbe85a36b3d5b72024d1cb1a417d20e767943fdd64ea7 sssd-common-pac-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 3a0c39dbb718769e990bb5aa2a820aa508a860ecefeb2664ce6a2747910cb5a6 sssd-dbus-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 1d7274df68ce814ef71a884321c2509fb0fc79fddbf36a865c942d1630376864 sssd-dbus-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 164245ef11e7d5569d3f890b62f4a469da09015fc0874c070a919f820bce9c7a sssd-dbus-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm c2062c0069cabb057504f032b0bd0ae5463dafa0c5d4c1de56a9380fc56f0cb4 sssd-idp-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 4e61fcbe69eb213403e78f8d90e9a6622cf0167947546620699a91b6303ed278 sssd-idp-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm a99f3c1b26affc24975ac771d15e26fb30dee53d2b6d5fd9db23f5efe15a8863 sssd-idp-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm bffc1c0b55c08431913ac9ca5b028f770ccfa1aa1332133944a4c56f0eb31f48 sssd-ipa-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 3f13ba12e7f09f5bf665bf787ba7b5c6180c49e87355a2b7362ebe0419edc821 sssd-ipa-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 86d7ae70ccc1222258034925aaedf69ee8624a8f44f41ab00c19d5729d23b486 sssd-ipa-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 59d8c7989d24ef7b157552602907fd033eb2f6d6f2c6b1fe9824c193a98a6b9c sssd-kcm-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 749150dc8ec5976b82fc476264c146a16e8633b2ace3ea85b05b36daea21a1a3 sssd-kcm-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 8f63fbe9f179809819c861b110a66fa4c8748fad8f7a0b6cb5af0ad3c21b9b23 sssd-kcm-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm abf9ad46e0f455728e74ab1ff9bb1f814e70ebb89df87cbfe1f363b0bd72066d sssd-krb5-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm e16b15d400cc87dc1a40c9491bb02bcff8615a15131d9b9482bc22f1f3c17ac7 sssd-krb5-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 740652e42be3a7519ae0b2d1d6a1f9fadef3b72eb77a1959315af1af4677457d sssd-krb5-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm f234ad8d13d1a079eff83e7ee780cad3e69104f67cbc72c6d2c6c35c142bca8c sssd-krb5-common-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 35432cae3f90251c1a56ee64ee18388b146ac27ea0cec3a0bfeb2185189b4d2f sssd-krb5-common-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 4f2a657d551319563c5a4e5f7e797d0a2cac60c3cbce311dc83e3512d2e70c59 sssd-krb5-common-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 055773b14fa0f02eb1fa0e6655fd694d1dc12886f5f2e88849287b24187ba59b sssd-ldap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 9c9b11bb849dc1f164668d3f0b10c3a856dad3ebad3d374154e49cf6a7e10d82 sssd-ldap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm d06db46a54867d6a2c5ad02447b84b6fd2318966eb50882d65389c2d42bce52a sssd-ldap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm ded33d628be7150c4d8104bbbd45b63d5d240081141a804d3257ab3f39b4e4db sssd-nfs-idmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 771243fa9cee968d87b9db6ab38144d91a73c5ee977d74dc52794a92907197fa sssd-nfs-idmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm e83cb3c182a71149b3268d4b2d5ce279bbe917e16202935065e8bc0342604b92 sssd-nfs-idmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm b61956ffdfc8de99a478ea63e711879f6e10ba9af2cd50bdce6449e9c6cc4b91 sssd-passkey-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm a65bc2af5a8c7f8e329a43bbaf9967a21db9bb8ff9be98a54e933f6ce77cab22 sssd-passkey-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 5344368b761c4784d3173d96e73556078859145c97119b9b02d9f528ae07cc40 sssd-passkey-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 521cc42d369874346bc5e57bc430ccad76ad7242f9e960c1ec7bbe87d74374b6 sssd-polkit-rules-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 765eac8b078600f062bbab461a9d7c24f79e7dff80fb2edb6c65aa054661e124 sssd-polkit-rules-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 283da31f39a3fd5feb990df3db076686c48c612066eaf15ae9ab3e32277a913d sssd-polkit-rules-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm c029d8f07c7139db3b613e5e1c379c9b1a67be3acc3dd769d46ce9e975d2f132 sssd-proxy-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm dac9a992eab17daa2ca16d94e084b2407206fb79b54021a341517645df5a7f44 sssd-proxy-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 45243ff02154a5acac9720e0776a3d3b0db64110a5932384a821d1fb980cb143 sssd-proxy-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm ee36fd0e6e709edc69440b34d453ade88ff9566ac1e62ff0e8098bc739933735 sssd-tools-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm 2f96c644fdec30f90ab2908ad204d1b10bdd7910a4f28d23fb0d1af159b5e02a sssd-tools-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 1ff1c9570066dd1f4c8640361db606daeee40f98bcc3ef6138e35c75440a9201 sssd-tools-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 2d4627f76a79908bf2ee0a8e36e434f1ce11f3cc7c1bf1a9302b120b88cb40f3 sssd-winbind-idmap-2.9.8-4.el9_8.1.tuxcare.els1.aarch64.rpm d4ae18ae2b226ce22b458c271439777c10c4fdf74fb2c5f5398f07694e70b7e2 sssd-winbind-idmap-2.9.8-4.el9_8.1.tuxcare.els1.i686.rpm 87a067efab69a81a2a4593c6599a7fe348219c09764f46ce1330a270554167d1 sssd-winbind-idmap-2.9.8-4.el9_8.1.tuxcare.els1.x86_64.rpm 83eae2095cd49b392e278b52acc2388c52934e44f6f35db9a5335ba431f28236 CLSA-2026:1792514909 TuxCare License Agreement 0 - Rebase onto the vendor's 1:3.4.10-9.el9_8.5 sources - CVE-2026-76880: fix out-of-bounds write in the RRC protocol dissector - CVE-2026-76886: fix crash in the C12.22 protocol dissector - CVE-2026-76919: fix DoS in the ESS protocol dissector - CVE-2026-76927: fix DoS in the H.245 protocol dissector - CVE-2026-95387: fix heap-based buffer overflow in the SPDY dissector - Retain the TuxCare fix for the divide-by-zero in the CP2179 timetag info response dissector (epan/dissectors/packet-cp2179.c) None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto the vendor's 1:3.4.10-9.el9_8.5 sources - CVE-2026-76880: fix out-of-bounds write in the RRC protocol dissector - CVE-2026-76886: fix crash in the C12.22 protocol dissector - CVE-2026-76919: fix DoS in the ESS protocol dissector - CVE-2026-76927: fix DoS in the H.245 protocol dissector - CVE-2026-95387: fix heap-based buffer overflow in the SPDY dissector - Retain the TuxCare fix for the divide-by-zero in the CP2179 timetag info response dissector (epan/dissectors/packet-cp2179.c)

0 tuxcare-almalinux9.8-esu wireshark-3.4.10-9.el9_8.5.tuxcare.els1.aarch64.rpm 6d9c3084f531bb79cc8db1d30da55262fb90c173f8c9efd8cfe2293f4b7cccc5 wireshark-3.4.10-9.el9_8.5.tuxcare.els1.i686.rpm c8fc9cb14959d9f2a39b72f4a6a97bd2dbccce1d8dece72939b66d368eef9243 wireshark-3.4.10-9.el9_8.5.tuxcare.els1.x86_64.rpm 5d12983ef0182cf0ea9f0de1bd4a272138c1412fabaddb7f31df25915b4141ba wireshark-cli-3.4.10-9.el9_8.5.tuxcare.els1.aarch64.rpm 8490530a88fb65a6102c8d45324c1d4e4ff1f8bfe7aea554b6690716152543be wireshark-cli-3.4.10-9.el9_8.5.tuxcare.els1.i686.rpm 2fb1a7d74ababe8d11469b1486db928a535496ae4c3cc95eea593256a7a6f71d wireshark-cli-3.4.10-9.el9_8.5.tuxcare.els1.x86_64.rpm c06ec91426d3a86ccc3b59502201e61423d63fb02b30c703528d54390b1e7b4e wireshark-devel-3.4.10-9.el9_8.5.tuxcare.els1.aarch64.rpm 8c21b8cd61c79687598bcc92d1a2c1245aa45f0521e4fc6b32dc291b0e239a80 wireshark-devel-3.4.10-9.el9_8.5.tuxcare.els1.i686.rpm 2f07f5b5ae408d9d1ce5f374ee10d111a0adfb7920c932c27de3405336d5cbd6 wireshark-devel-3.4.10-9.el9_8.5.tuxcare.els1.x86_64.rpm 534b2487357a00fe408a187bdb93b2fc2ca1452af6d14e20dc8a6445a1ad3af8 CLSA-2026:1792521456 TuxCare License Agreement 0 - CVE-2026-105840: reject absolute path names in restricted mode in lrz (received files) and lsz (sent files), not only in PUBDIR builds - CVE-2026-105841: remove the pipe mode that ran received files through a shell command when lrz was invoked as rzCOMMAND - CVE-2026-105842: allocate the received path name with strdup() instead of a fixed PATH_MAX*2 buffer, and NUL-terminate the ZFILE subpacket Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-105840: reject absolute path names in restricted mode in lrz (received files) and lsz (sent files), not only in PUBDIR builds - CVE-2026-105841: remove the pipe mode that ran received files through a shell command when lrz was invoked as rzCOMMAND - CVE-2026-105842: allocate the received path name with strdup() instead of a fixed PATH_MAX*2 buffer, and NUL-terminate the ZFILE subpacket

0 tuxcare-almalinux9.8-esu lrzsz-0.12.20-55.el9_8.tuxcare.els1.aarch64.rpm a94fcf5c4615161465a257e9fdb42c72fa88e5c9af0107901db939b02adc14b6 lrzsz-0.12.20-55.el9_8.tuxcare.els1.i686.rpm ffa1308bd1161919d7dc40a7354f39cfc886800bbbd1c3632ad5cd6fb5a3b7a0 lrzsz-0.12.20-55.el9_8.tuxcare.els1.x86_64.rpm ef45af2f5dd654ef2455d58bb4170d70a746246b70ca7632ecb689162431b33e CLSA-2026:1792504436 TuxCare License Agreement 0 - CVE-2023-44488: crash in vp9_change_config() on smaller width, bigger size - CVE-2023-6349: heap overflow in vp9_change_config() on a larger frame size Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-44488: crash in vp9_change_config() on smaller width, bigger size - CVE-2023-6349: heap overflow in vp9_change_config() on a larger frame size

0 tuxcare-almalinux9.8-esu libvpx-1.9.0-10.el9_8.tuxcare.els1.aarch64.rpm 6070ff272b888fc5531edf1d59424d97618ea636c2e6ff21e3e139500ff473fa libvpx-1.9.0-10.el9_8.tuxcare.els1.i686.rpm 4f1218e4be0dd018e59cfae0838cf9f467a99a066541acd49c6cf273f93fa44d libvpx-1.9.0-10.el9_8.tuxcare.els1.x86_64.rpm d6d9a5f27ce52b5da6af5a87c6572a1989c1d2ad0880184d2baa61865b02a283 libvpx-devel-1.9.0-10.el9_8.tuxcare.els1.aarch64.rpm 9b379567a0cfa5b6454d0cc5e945ed214d8f919c5ef217b16d52a69fa6feee8e libvpx-devel-1.9.0-10.el9_8.tuxcare.els1.i686.rpm fc75d97059d657b2014b777f060ad42bf83fd54d81442a6b462a8c8bfca3b6da libvpx-devel-1.9.0-10.el9_8.tuxcare.els1.x86_64.rpm 9d41bf4dce7a27ebede81b83e840875580c651923bc10420cfbd730f99c1adbd libvpx-utils-1.9.0-10.el9_8.tuxcare.els1.aarch64.rpm c4cbd6c0b41075f5e8d2809f31d1818a90c3562d3ed44567911dcd015b41dd9a libvpx-utils-1.9.0-10.el9_8.tuxcare.els1.i686.rpm 4b8726482838d3dc00027d4c47c5b6bf7433850926707a9046bac08fd57db3e4 libvpx-utils-1.9.0-10.el9_8.tuxcare.els1.x86_64.rpm 4cf1297d7e54fc5c1c61f68b198277b8192f1c82ffa46dfa71118f3dcb7c4cf3 CLSA-2026:1792564149 TuxCare License Agreement 0 - Add tuxcare9.8esu; carry fixes for CVE-2025-55304, CVE-2025-54080, CVE-2026-25884, CVE-2026-27596 and CVE-2026-27631 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Add tuxcare9.8esu; carry fixes for CVE-2025-55304, CVE-2025-54080, CVE-2026-25884, CVE-2026-27596 and CVE-2026-27631

0 tuxcare-almalinux9.8-esu exiv2-0.27.5-2.el9.tuxcare.els5.aarch64.rpm 7eacb48e1e2caa452e53810455c043667419397292a989094aac090e8d549d6c exiv2-0.27.5-2.el9.tuxcare.els5.i686.rpm 11f03c4ac0560fe3e8d9729b8f0805ee4710bea081c058df9fe3f162d5b3c75c exiv2-0.27.5-2.el9.tuxcare.els5.x86_64.rpm ecceca399fe3ca1ba43be6a54af2f1a1f57bb0a193109c501ac17a92509b039c exiv2-devel-0.27.5-2.el9.tuxcare.els5.aarch64.rpm fe24a8f820bb448f16bc6481e5c9c6c934e291e6c56dcec509866b72030816f2 exiv2-devel-0.27.5-2.el9.tuxcare.els5.i686.rpm 148d3ae8e6ac04d580154c5b33f14641fd39cb10ea33aadbeb0883818ca17692 exiv2-devel-0.27.5-2.el9.tuxcare.els5.x86_64.rpm f7d8193170fb221480d07bcd2a10196531723a5207bbcbcc86c1f450166ddebb exiv2-doc-0.27.5-2.el9.tuxcare.els5.noarch.rpm 31e296158752461f7616069c997ca4dd8c552cadee75ae6355b98ea6f04863ed exiv2-libs-0.27.5-2.el9.tuxcare.els5.aarch64.rpm feeb2a13313aa50af82e166971a11a0ecf8bf1186ec681b4bfa288f8d8d8ecbc exiv2-libs-0.27.5-2.el9.tuxcare.els5.i686.rpm a4c312a1d1013daae2fbf42952b56f6ecbd6614ed203f165896c135dbf189041 exiv2-libs-0.27.5-2.el9.tuxcare.els5.x86_64.rpm 59b8d979e03f928a094bb972f63aef15ac6e3cbed6a67baa42dfa4ca7f2a856d CLSA-2026:1792127876 TuxCare License Agreement 0 - CVE-2026-14257: cap the number of brace expansion results at 100000 by default and expand chained brace groups iteratively instead of recursing, in the bundled npm brace-expansion copies Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-14257: cap the number of brace expansion results at 100000 by default and expand chained brace groups iteratively instead of recursing, in the bundled npm brace-expansion copies

0 tuxcare-almalinux9.8-esu nodejs-16.20.2-8.el9_8.tuxcare.els23.aarch64.rpm 1b4adef7a3e0273474a69f975b698b9fd4f51ab6fe77896fb1f26f97b9e1a6d0 nodejs-16.20.2-8.el9_8.tuxcare.els23.i686.rpm 5be21b4865fa8b13d6212940963a0668d54066fd0bd846cc2e99e9df94a9c4f2 nodejs-16.20.2-8.el9_8.tuxcare.els23.x86_64.rpm 234cbba8d21dd091095fde616d055e5fd3352157fbcc7d49fd2e30b818e978a7 nodejs-devel-16.20.2-8.el9_8.tuxcare.els23.aarch64.rpm e820f52d985b1108ac1aeafb84c29029fe0451298e9a9a7695040fa0e80ec482 nodejs-devel-16.20.2-8.el9_8.tuxcare.els23.i686.rpm fb3e430cadc832eeb31e7c62cfde6e2c642e2f63c12024f1f05428342a4fc2ec nodejs-devel-16.20.2-8.el9_8.tuxcare.els23.x86_64.rpm c3a47b45244b0ad877f106a88734e211d0c533dfdd5609af63bfef3369ed3439 nodejs-docs-16.20.2-8.el9_8.tuxcare.els23.noarch.rpm a8360a890a790dc8801838a9f914321c5116674754a6d6a95f28fef75981fb33 nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els23.aarch64.rpm bdead9c10083bd7427c95c90c3b213b8d5c0a1d3d810a0f4cf5050bdd512d53e nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els23.i686.rpm af9a22e75eff1b839d438858bb4c00558b5923ffb8709b295c31c0106d7e9295 nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els23.x86_64.rpm 9a4df6e3d964e9eaa96202b596d2e51af99ebb645ecdc5be908b0e8669d7cee9 nodejs-libs-16.20.2-8.el9_8.tuxcare.els23.aarch64.rpm 785a874be4dbb73f50d66aa1145ccfb0fe9ed7c599911585b5fe1ccda8ab7411 nodejs-libs-16.20.2-8.el9_8.tuxcare.els23.i686.rpm 037f8bc1c0beb7f0c37789aba1dbd0d2ea996a1eb13b9af128ae2eb683ee3b4e nodejs-libs-16.20.2-8.el9_8.tuxcare.els23.x86_64.rpm 283daa8f040ede857240df31d502ff1c8d2eaed4c6ab0ad7279647f2246e5e5f npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els23.aarch64.rpm d8a882aab472b9344c84844f5878c6388921e0e5f46d2e287bba5f52fb1e365d npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els23.i686.rpm 88676ea78d8c4be07794390fad01a4392a9b302a9ff88c60bb3f3ecefd6d2bb9 npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els23.x86_64.rpm 6994f050d0de896672b363df7bb773517d8411cd3fe0b877ab91f0825a3fd617 v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els23.aarch64.rpm f127913354138b1af75c33fd5e66f6b283a09114cfd9c075d16dc6950e87c52b v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els23.i686.rpm dd7d79edb6f431103815ef9b790c62de78868a7bb36b11adf3cca9ca672d575b v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els23.x86_64.rpm 0181188ba4cff00e10b6a78502e3495d59642e50579d65f562bb1678f10f2e6e CLSA-2026:1792573081 TuxCare License Agreement 0 - Rebase onto the vendor 1.12.9-4.el9_8.4 sources, which prevent an arbitrary write as root via extra-data extraction (CVE-2026-96275) and harden the OCI delta parser against size overflow (CVE-2026-96280) - Retained the TuxCare hardening of regenerate_ld_cache() in common/flatpak-run.c and of flatpak_switch_symlink_and_remove() in common/flatpak-utils.c, which the vendor sources still lack - The TuxCare duplicate of the data-dir and /var symlink hardening for common/flatpak-run.c plus the libglnx chase prerequisites is dropped; the vendor's run-harden-ensure-data-dir-and-var-setup-against-symlink-attacks, chase-add-internal-glnx-chaseat-full-for-a-strategic-callback and chase-add-glnx-chase-and-mkdirat patches carry the same fix - Keep the retry of openat2() on EAGAIN in libglnx glnx_chaseat(), which the dropped TuxCare patch carried and the vendor's chase patches leave out - The TuxCare duplicate for revokefs/writer.c is dropped; the vendor's revokefs-avoid-symlink-path-traversal-* patches carry the same fix None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto the vendor 1.12.9-4.el9_8.4 sources, which prevent an arbitrary write as root via extra-data extraction (CVE-2026-96275) and harden the OCI delta parser against size overflow (CVE-2026-96280) - Retained the TuxCare hardening of regenerate_ld_cache() in common/flatpak-run.c and of flatpak_switch_symlink_and_remove() in common/flatpak-utils.c, which the vendor sources still lack - The TuxCare duplicate of the data-dir and /var symlink hardening for common/flatpak-run.c plus the libglnx chase prerequisites is dropped; the vendor's run-harden-ensure-data-dir-and-var-setup-against-symlink-attacks, chase-add-internal-glnx-chaseat-full-for-a-strategic-callback and chase-add-glnx-chase-and-mkdirat patches carry the same fix - Keep the retry of openat2() on EAGAIN in libglnx glnx_chaseat(), which the dropped TuxCare patch carried and the vendor's chase patches leave out - The TuxCare duplicate for revokefs/writer.c is dropped; the vendor's revokefs-avoid-symlink-path-traversal-* patches carry the same fix

0 tuxcare-almalinux9.8-esu flatpak-1.12.9-4.el9_8.4.tuxcare.els1.aarch64.rpm 659becee0c0c34c7cee1356f4f67db91e60314d3f76830bc12894f965f770a5e flatpak-1.12.9-4.el9_8.4.tuxcare.els1.i686.rpm 17c716d0e90779dbef8be00e7d8e2fdc9d941ac9e0ce2ac1fb5fd495127e272e flatpak-1.12.9-4.el9_8.4.tuxcare.els1.x86_64.rpm 6b7ade4f9d0af1a0a12274198cc6a00c00ebd483b2f6910b12d734aac13a0f9d flatpak-devel-1.12.9-4.el9_8.4.tuxcare.els1.aarch64.rpm f065fccf9a2b9b336fd7b074fe06554603c860325b0c02d595b66b8a96daafb0 flatpak-devel-1.12.9-4.el9_8.4.tuxcare.els1.i686.rpm 5a20bb0ad61c99087435fe78a1bab4e90d040096a1947fc530ddb3236590753a flatpak-devel-1.12.9-4.el9_8.4.tuxcare.els1.x86_64.rpm dbcd21a691b5ae06a1f1571aac6e680c03c17feb22fba0e4e5be4e45a22e47cf flatpak-libs-1.12.9-4.el9_8.4.tuxcare.els1.aarch64.rpm 21535a8f8f9bca017758361195f311869091c354c0df333d60dd689d54b932ad flatpak-libs-1.12.9-4.el9_8.4.tuxcare.els1.i686.rpm 57d1745d238b361820739ad82212eb18d4d7a1567e196e919b60b41ca7bc0f1b flatpak-libs-1.12.9-4.el9_8.4.tuxcare.els1.x86_64.rpm e43658f4817f6ff0d6d19d20270faf6d911c9cf54430041104e1d24ede5f73f7 flatpak-selinux-1.12.9-4.el9_8.4.tuxcare.els1.noarch.rpm 25e37ccb157db0d6cf0690d83ddddf884d1fb2681b2111de3544bf10279413dd flatpak-session-helper-1.12.9-4.el9_8.4.tuxcare.els1.aarch64.rpm 715094da762967baade59ec76ddfde45b9e4fb01171e6ed07e7c4c1069d95d7f flatpak-session-helper-1.12.9-4.el9_8.4.tuxcare.els1.i686.rpm 7832e00f5d0eea4ebb7517c05f67222cea0d7b7bcee7e7ce3b51dac93920a9d4 flatpak-session-helper-1.12.9-4.el9_8.4.tuxcare.els1.x86_64.rpm 9d73ef82264558333bb5c3ab3ba0a366b467062bd00d61c2e1a2183bc6cd1968 flatpak-tests-1.12.9-4.el9_8.4.tuxcare.els1.aarch64.rpm 3c8f94f52a5ff3762d575a58ab87f44d6bd8835f4b963e9ff234bec729b8658d flatpak-tests-1.12.9-4.el9_8.4.tuxcare.els1.i686.rpm c738798be7812b68124f116b38f18589c7f38acd619be80ae814f94d5a01521c flatpak-tests-1.12.9-4.el9_8.4.tuxcare.els1.x86_64.rpm 8f2dfd7eefa942979348a8a0a786c29867efa88810f7e4c3c2457aff46e9c219 CLSA-2026:1792588753 TuxCare License Agreement 0 - CVE-2025-15224: libssh: require a private key or CURLSSH_AUTH_AGENT before attempting public key authentication - CVE-2025-14524: SASL: do not send the OAuth2 bearer token after a redirect unless CURLOPT_UNRESTRICTED_AUTH is set - CVE-2026-5545: do not reuse a connection with Negotiate auth in progress as an NTLM upgrade candidate Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-15224: libssh: require a private key or CURLSSH_AUTH_AGENT before attempting public key authentication - CVE-2025-14524: SASL: do not send the OAuth2 bearer token after a redirect unless CURLOPT_UNRESTRICTED_AUTH is set - CVE-2026-5545: do not reuse a connection with Negotiate auth in progress as an NTLM upgrade candidate

0 tuxcare-almalinux9.8-esu curl-7.76.1-40.el9_8.8.tuxcare.els2.aarch64.rpm 8c4cfb93b5e5e1555814503eb44ee2f34ddb06750d1f89716afda607fa390f87 curl-7.76.1-40.el9_8.8.tuxcare.els2.i686.rpm 18fdb5744a92706364fcc7afb086f4d8959e1d6fb91856c1198ccea070fad5f8 curl-7.76.1-40.el9_8.8.tuxcare.els2.x86_64.rpm 016aaa982c369deb208dec4809ef36c1ca2c0aeeec877adbd0b0c71c52506454 curl-minimal-7.76.1-40.el9_8.8.tuxcare.els2.aarch64.rpm 78be4418ce0c199408d2ddb0e5bbaad835e1d0517b99038b268d2f583e36c6fa curl-minimal-7.76.1-40.el9_8.8.tuxcare.els2.i686.rpm fdff0c8c79e0c453702ec2cdd9a5d580a90be2011abe10d31b077b9d55598721 curl-minimal-7.76.1-40.el9_8.8.tuxcare.els2.x86_64.rpm e554a390feb9fb83dadba486b4ed8f01c00dca792492af759efc10318c9cd94f libcurl-7.76.1-40.el9_8.8.tuxcare.els2.aarch64.rpm 9de9d7c0258886c838ab35b2afd7a7d0aae6b51ad4a8b77e35de7fff5341e5af libcurl-7.76.1-40.el9_8.8.tuxcare.els2.i686.rpm c7fb5f02dbb1011ddaf05cc3a6d8b77372f91bd2c1c548b74d6604b4f75498ec libcurl-7.76.1-40.el9_8.8.tuxcare.els2.x86_64.rpm d0fdbf25fd651a6e3d7b17316bf60e2acea5ca67a2c97c8b6a50d813fdaa9c54 libcurl-devel-7.76.1-40.el9_8.8.tuxcare.els2.aarch64.rpm ce4b69e489670eec7a69d3ae8e8798960789c97ad3cc144130b74ef4b7ced05f libcurl-devel-7.76.1-40.el9_8.8.tuxcare.els2.i686.rpm cd58d993b812437c9eead95eb9f98bfef9716c136a1e485f8e974b53521bd7a0 libcurl-devel-7.76.1-40.el9_8.8.tuxcare.els2.x86_64.rpm e3c056ff9720e8e77df606c90e184f9215e46f22a626e611a09521c7f41cb1b5 libcurl-minimal-7.76.1-40.el9_8.8.tuxcare.els2.aarch64.rpm 362657cc4fd6abeff3b562e930d2fdd3ce1d730b604b7e0f2972e864ada0a650 libcurl-minimal-7.76.1-40.el9_8.8.tuxcare.els2.i686.rpm 706aaafa0799e39375dbcbf766d1284e357334cbd1259b94dbc499e9b43bbb7f libcurl-minimal-7.76.1-40.el9_8.8.tuxcare.els2.x86_64.rpm 9be42585137072e9e0f316f1cfc70b9acb56c7c58c736ac159efaf2115b5f014 CLSA-2026:1792598293 TuxCare License Agreement 0 - CVE-2026-53939: fix all-zero AES-CBC-HMAC content-encryption key Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-53939: fix all-zero AES-CBC-HMAC content-encryption key

0 tuxcare-almalinux9.8-esu cjose-0.6.1-17.el9.tuxcare.els1.aarch64.rpm 674892ae50fbe219ac38269f2281af031f357ac969303be3d36975cd7b856796 cjose-0.6.1-17.el9.tuxcare.els1.i686.rpm a1e408ea342eaf50ad6b224c2918ada695562e0b33acebcf7e4182b108ff77db cjose-0.6.1-17.el9.tuxcare.els1.x86_64.rpm 45bad70ca624e5acf5bf15dcd237b9ab276656305f7dea268d87f6536808818f cjose-devel-0.6.1-17.el9.tuxcare.els1.aarch64.rpm 8609341cd7a8ae821cc8bbbb52915d34caeab6e0d5bcc60412a34a2bcd79cb30 cjose-devel-0.6.1-17.el9.tuxcare.els1.i686.rpm 0163889b2a32dac8b8b7d93424e1737d0fa83774f9df5e17a3caae90427f8af2 cjose-devel-0.6.1-17.el9.tuxcare.els1.x86_64.rpm c372b08701842ae36d4e73e8662e56b15885e690401458203ff12cb67347ecb4 CLSA-2026:1792600733 TuxCare License Agreement 0 - CVE-2026-46469: avoid division by zero in qtdemux_parse_trak when zero audio channels are signalled - CVE-2026-46470: avoid division by zero in qtdemux_audio_caps when zero audio channels are signalled for raw LPCM - CVE-2026-1940: fix out-of-bounds read in gst_wavparse_adtl_chunk on odd-sized adtl sub-chunks Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-46469: avoid division by zero in qtdemux_parse_trak when zero audio channels are signalled - CVE-2026-46470: avoid division by zero in qtdemux_audio_caps when zero audio channels are signalled for raw LPCM - CVE-2026-1940: fix out-of-bounds read in gst_wavparse_adtl_chunk on odd-sized adtl sub-chunks

0 tuxcare-almalinux9.8-esu gstreamer1-plugins-good-1.22.12-7.el9_8.8.tuxcare.els2.aarch64.rpm e861e8087bfc9c31c805736f195487aeb4d6c4219cc67dbbf81b5d63b95a7967 gstreamer1-plugins-good-1.22.12-7.el9_8.8.tuxcare.els2.i686.rpm 5c3982179ae64f0ebd5b6a99eea723b91568f36b44fca3630d24019837fcf062 gstreamer1-plugins-good-1.22.12-7.el9_8.8.tuxcare.els2.x86_64.rpm e46bfef60879cc2bc66b266cb07cc16b9482532449848c5de1a8e4b00ffe8724 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.tuxcare.els2.aarch64.rpm cbb1db83514f0f09a3a7025d786e4426c241b7da7d0c64ee3f5ffe7fae3ad6b6 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.tuxcare.els2.i686.rpm a863078dede990b9823ebc884bd0b251464f1a1479adea6623cae1f592a30899 gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.8.tuxcare.els2.x86_64.rpm d7d2fe971c81f04474642150b0981af2f58f19ba3fa73ab81b1020996ea58a83 gstreamer1-plugins-good-qt-1.22.12-7.el9_8.8.tuxcare.els2.aarch64.rpm c218d7adeb0d909c1e4d7ac5bc882837c4b219a6488ca07c632db913a4306218 gstreamer1-plugins-good-qt-1.22.12-7.el9_8.8.tuxcare.els2.i686.rpm e85e99a8b0ba75c360cbe8dec38191aa5cd6191b45fb985812e9b51cc236ff11 gstreamer1-plugins-good-qt-1.22.12-7.el9_8.8.tuxcare.els2.x86_64.rpm 3bcae33151c49e0c3e8c5d86c9d767485e0680a010050d0bd770fedb91d43776 CLSA-2026:1792597242 TuxCare License Agreement 0 - Rebase onto the vendor's 2.72.0-16.el9_8.8 sources - CVE-2026-102556: heap buffer overflow from WebSocket Pong signal type confusion - CVE-2026-102557: heap buffer overflow during WebSocket message reassembly - CVE-2026-102558: heap buffer overflow during WebSocket receive-buffer growth - CVE-2026-102559: heap buffer overflow during WebSocket client-frame masking - CVE-2026-102560: heap buffer overflow during outgoing permessage-deflate buffer growth - All TuxCare ELS patches are retained unchanged: chunked and Content-Length framing in soup-body-input-stream.c, soup-headers.c and soup-message-io.c; header and Range parsing in soup-headers.c and soup-message-headers.c; soup_filter_input_stream_read_until(); cookie and date formatting in soup-cookie.c and soup-date.c; URI host and HTTP method validation in soup-uri.c, soup-message.c and soup-message-server-io.c; Proxy-Authorization handling in soup-auth-manager.c and soup-session.c; digest nonce replay in soup-auth-domain-digest.c; and sniff_unknown() in soup-content-sniffer.c Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto the vendor's 2.72.0-16.el9_8.8 sources - CVE-2026-102556: heap buffer overflow from WebSocket Pong signal type confusion - CVE-2026-102557: heap buffer overflow during WebSocket message reassembly - CVE-2026-102558: heap buffer overflow during WebSocket receive-buffer growth - CVE-2026-102559: heap buffer overflow during WebSocket client-frame masking - CVE-2026-102560: heap buffer overflow during outgoing permessage-deflate buffer growth - All TuxCare ELS patches are retained unchanged: chunked and Content-Length framing in soup-body-input-stream.c, soup-headers.c and soup-message-io.c; header and Range parsing in soup-headers.c and soup-message-headers.c; soup_filter_input_stream_read_until(); cookie and date formatting in soup-cookie.c and soup-date.c; URI host and HTTP method validation in soup-uri.c, soup-message.c and soup-message-server-io.c; Proxy-Authorization handling in soup-auth-manager.c and soup-session.c; digest nonce replay in soup-auth-domain-digest.c; and sniff_unknown() in soup-content-sniffer.c

0 tuxcare-almalinux9.8-esu libsoup-2.72.0-16.el9_8.8.tuxcare.els1.aarch64.rpm 7c864a64b8772f52886faad8c682b865894880fc2c35805b4983918289afb60e libsoup-2.72.0-16.el9_8.8.tuxcare.els1.i686.rpm bfb0eb0637611f985368eac507bcd2d38e2055be21c3178b82316c52e5433ff8 libsoup-2.72.0-16.el9_8.8.tuxcare.els1.x86_64.rpm 65ffcf8062ef5fe8c76e30865a09474194206b8bc1bddf4a3d3c2e69fd03296c libsoup-devel-2.72.0-16.el9_8.8.tuxcare.els1.aarch64.rpm 716dabaf371338526b818375f2b34524e07abc200ef79e031df41be249502e79 libsoup-devel-2.72.0-16.el9_8.8.tuxcare.els1.i686.rpm 49d5e4f5e552c6d1982fa9cf750d27a664e335188c64307c355500cc39014c34 libsoup-devel-2.72.0-16.el9_8.8.tuxcare.els1.x86_64.rpm 6e3daeac85eeeb83f96529c08750d1412379afbaf082c4bc6046f754c2b01ccf libsoup-doc-2.72.0-16.el9_8.8.tuxcare.els1.noarch.rpm 429873dc0d5a3a51f47455bc85019313fe87a2226f915e4e67db2f7163868485 CLSA-2026:1792612025 TuxCare License Agreement 0 - CVE-2026-109618: fix code execution via state corruption after an out-of-memory error (GHSA-w8hw-w9fx-j79w) - CVE-2026-109619: fix code execution via stale global state between requests (GHSA-6wmf-4rv5-p3rp) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-109618: fix code execution via state corruption after an out-of-memory error (GHSA-w8hw-w9fx-j79w) - CVE-2026-109619: fix code execution via stale global state between requests (GHSA-6wmf-4rv5-p3rp)

0 tuxcare-almalinux9.8-esu php-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 87fc0153ee398c732e847500d10a8108b4f2b5039d0c99e32e3030354f20eeda php-8.0.30-8.el9_8.tuxcare.els4.i686.rpm aea8276986432d6e9ac2a2040ff99e90a3bbf2a4aaf1421e2edcb3d2688d5a0b php-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm dc1312f6cf9702a611d860c16758b4d0a07bb7a3ade5ac9e37839b4c19d3fac7 php-bcmath-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 9c902efec3205ed2b30d33c3e488ed23896b1ad425162af21d8def7a6848e8e9 php-bcmath-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 07a3706f34729c390ad8f2021dcb8a79d6dc8498179530b99ef7575464fcc43e php-bcmath-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm f28248590f797799931eb05858a33f42eda079502d654c9db7df04bbd568c94a php-cli-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 6eb568de75db9fae61a039317c8bf380097f45ed8ade07204c4b1a7e3d792993 php-cli-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 2b41b40dd64cdc16e496e2d880b86097910d1a2c67f766d42303ec448d108422 php-cli-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 8abb89472ae6be06179110be2b31379051f31b3c30c06c31b122a8173fb6db06 php-common-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 5511bf8f32d931e54eef2085c573d5399f7a615483292c74e35aeaaef5b07ef6 php-common-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 6d0c1567d1516a7390ad4d5aa381bb8f583a78d62b82fa4303157c16b5aa04f3 php-common-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 58ee4c9d496c1a895ec5b207c83014351a87be18fffa565e26d5f82578f2c521 php-dba-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 1c20221910feba335ccb35993b10f79ada2bebf6a63299d5b9a074ebcdd1044c php-dba-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 9a7f7b3e4c7e056151de5134e9a4cd78da2e87895a37bfd53c6aacb911540257 php-dba-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 19c9ea416ef38ae21f21c7b89cbb482cc34a401fcb472224cbc4cc7eda402dc6 php-dbg-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 0346a9c5d447a18426e19db80305a8685eff3208a6f395dc1678d3939f4690f7 php-dbg-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 2d86eec4faf29b1155efa8ca5222876ed5327a1622bf1992431baa4792a3edd5 php-dbg-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm f158623152cb95d30a5f9e6ee1d8af21a0e13031aba7d8f16301bdb391cbc9e8 php-devel-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 6ddcaa3317b78e61f165067249257baece9001c179a9c418c80047e27e1f3499 php-devel-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 730de30e71aebaa7cf95b932cdbe2e3a47a9b92e1bd48ff53bd6ed1d1ee35c21 php-devel-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm d546534bd073a62f643c523af454cd89bac9e3042a9205873028fefb0cb45d6a php-embedded-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 7c6815320f4826336a5e4b9a7feab11aa61f1dfba0dad5c2711ee0503f373be1 php-embedded-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 8be60d7ba2c52c644c6b441a45d215122a30e4aaee4ca7dd497b92596efe68a9 php-embedded-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 5a307b62592cd68a8980950b46dfa768df11ee01bf18f4f3451ea78bce9f77da php-enchant-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm e756f2e53de30e9a6e10263fd01649cf2ac7c276b6efcf913e84e4d93aac4607 php-enchant-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 3a90931eab7205d1174544f4db2314c3d8ea600ed260292ea9f10facd08e1475 php-enchant-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 3470e4461ef8f4d7278bcdeac320a6ef56ac5063b53b639ceb84480a887dfde5 php-ffi-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm aa9c55e82abac5be66360416f099db532244030541f9b60fd52e9e1e7f687bcc php-ffi-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 1fbcd3f7c7bbfb00b9c14bf24aef9ff9cf68b1fdeb21295b1944a57f3c17b2b6 php-ffi-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 590eb66556be40ae36b483ee71f78d06e6508b22d0e9d6cfcee9adf393366492 php-fpm-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 14b43c6689cdce538c578d731c813d0a37ab8ee62094ef38e8e84034622e61aa php-fpm-8.0.30-8.el9_8.tuxcare.els4.i686.rpm be999ca46f99b2e82a8103aa398de30f6898f955e71e98526ac6595296b87728 php-fpm-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 3ca5dc617041a533dd113f8c184500c2752ef01b7c4283c038983d2e205fd746 php-gd-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm b7186f23d2a361bd57a897b1c01a7161251501923f7e260760c0fda07816c531 php-gd-8.0.30-8.el9_8.tuxcare.els4.i686.rpm a0f78b2ef91d47f41f56d1e544575543c1f9ffb131453b127cf7faed4f11ff73 php-gd-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 48eb2e7e97c5dd90b833ec68e41afe6b43d54e45d06f6bc7e950062927c53dd7 php-gmp-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 08b0fc1d0a5f24fe71ff7155a653c00718cbcdedb21acaec01f1ef201b497c55 php-gmp-8.0.30-8.el9_8.tuxcare.els4.i686.rpm c5818c859767b559f297b1323491d2a8a24186c1b259e4a8eae6c765f81992f7 php-gmp-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 54c40568641b3a60b1240f3d319663fe48d1f935dd34c207fd7129b7f79bfb68 php-intl-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 60919d003740add2a36a313a7e9a2ee63cc5f17fb87d032e0aa2e621b6a4e2b2 php-intl-8.0.30-8.el9_8.tuxcare.els4.i686.rpm a593b5fb166b39b1632c23006f1644fdaf716aa775514a426ff1335c8455cd22 php-intl-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 8d4aad84daa2e9521cb8f53b487d8608e1ef018bff710252f0dd9b04eb1076cf php-ldap-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 7f68f508542ace67854b4d663d2ff136775a729d019fd41d8adb8c4bd9bb8a85 php-ldap-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 74eb3a189007f241fd39bd55a49614a0c98239ccd27d29d9855bafd9b3c490f0 php-ldap-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm d299bc2023ed5734be4ade345a77b18a145d8924ded3168bc936edd29dd67ba5 php-mbstring-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm f41724045cf6da5a603a1fe366db692ff902ef697913c8e4d2de582d3c384e7e php-mbstring-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 39e9f5cef00122f248c966457fb3370fdd316ca5c627ebd3b749e95fda901e51 php-mbstring-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 64005e9329b7f636f5c2d41ed54d86f288515b2b21c1de810d1ad3d5fab04214 php-mysqlnd-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm b23df1eadfd41677527553623f8a745afbcaf103476e83b2fe6b5d3f1807e321 php-mysqlnd-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 0151cc189f30121890c034b71dc40307d7effe8fafadde400c2644cd63274b27 php-mysqlnd-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 5ea051f67bfd7b8ca1e74036e7e1bf25f7094de563918f9ec1c2e5b09720fa23 php-odbc-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm fe1378def1d313774c5a840098091a61e8636f607398887a2141f681caa37884 php-odbc-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 8899c860f4781be71cf2a5b27c3307cc53672a8ed0159fa487c8210d70df6e15 php-odbc-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 9ed5de93968d27ec0bf7e92c51a0061af4ac8ff1de93267aa2484490359b0240 php-opcache-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 9a31552835c0c7dc256d2fcdb673a490560503184dd109164d9d37e3cfa48e29 php-opcache-8.0.30-8.el9_8.tuxcare.els4.i686.rpm c6177e065359f14a0a2a28bb942e620fe5b3fb2f78d28776fc2bd38d4ce986c1 php-opcache-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm ab911e84902339f745a120e3e83c479bb8324d99b58b2291840724598d1c1f7f php-pdo-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm dc282794a6557e039f1022028f482d4615e9ab82871faa19cd5b060673079338 php-pdo-8.0.30-8.el9_8.tuxcare.els4.i686.rpm af0a7bf3c07c60c173efe229c324dac43a17242c6ead3d8163f66b8cc7635ab0 php-pdo-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 585fc8867c651a2306235fab3a7d105abd4f1316bd0c9488ac76e4a99ccdc916 php-pgsql-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm f3c78a57ec89d617c9bd7ab213270b4e39a8af7617e24dd4762fc605d0f46a67 php-pgsql-8.0.30-8.el9_8.tuxcare.els4.i686.rpm c60d731a1a7d2b271aae053de63066f34d76a02b36f26f1ba81087f2d3b79c82 php-pgsql-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 2446034fda49d6dbfa49940dffd8b72a8db45b70985e4c68f9d2f7ec4e518d75 php-process-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 67a83ef39a490c1bcab64e4803dfb5cdfa87a2e5c189a3ef06b0cf93caf44596 php-process-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 2b1a9e1ae8ec8ea2b5b55b2c7c93f953242f89cfa5fb3b7738279f59eedae10f php-process-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 3a1e3c40f7ea589c48c70bb74fae519ab33c57d12f62ed219a653bd2cfc7bc66 php-snmp-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm daa6a3cb73cece005a43b874ba82376e42aaca3528352377ecc4aaf047482287 php-snmp-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 56baf65a502b8955ade92ce5200a6fc805a07788a48a28c509be5e67a2645fc5 php-snmp-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm dece0b6a41671bc5573a8d1ab3b0b9c5a6d68d999f0d5bf77d553d47c479c30a php-soap-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm ff22af75cd2e8bb410b8932024ab8fa910be617e1e6d0f4b634b8d0e4f7649ba php-soap-8.0.30-8.el9_8.tuxcare.els4.i686.rpm 48a8a59c7812c91efc002ef60a7363ff35fdade4fe5f4a0dc83cbac1971ca176 php-soap-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm 0c9866acb4fcdf7609aee3d4615ea5361fbe0d9d52d393a333384e635343570e php-xml-8.0.30-8.el9_8.tuxcare.els4.aarch64.rpm 9938e751abfd86e9872bf0948e55d6a835cb4c84973f450976c08a82752a0ee8 php-xml-8.0.30-8.el9_8.tuxcare.els4.i686.rpm ae3180ec14955156aa686a3384925bcba3e0d911b9eb2312e963b5e1630f4b1d php-xml-8.0.30-8.el9_8.tuxcare.els4.x86_64.rpm b41158c4ae33f1e83da0d698af986e375eee8f27f5aeb80f0f07713f896e50ed CLSA-2026:1792399312 TuxCare License Agreement 0 - rebase onto the 1:2.3.16-18.el9_8.8 vendor sources, which fix CVE-2026-27852, CVE-2026-33263, CVE-2026-33605, CVE-2026-40018, CVE-2026-42007, CVE-2026-42391 and CVE-2026-73208 - retain the TuxCare removal of the unsafe src/plugins/fts/decode2text.sh attachment conversion script Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto the 1:2.3.16-18.el9_8.8 vendor sources, which fix CVE-2026-27852, CVE-2026-33263, CVE-2026-33605, CVE-2026-40018, CVE-2026-42007, CVE-2026-42391 and CVE-2026-73208 - retain the TuxCare removal of the unsafe src/plugins/fts/decode2text.sh attachment conversion script

0 tuxcare-almalinux9.8-esu dovecot-2.3.16-18.el9_8.8.tuxcare.els1.aarch64.rpm a8b3d0f7b978aa9e0c2de3fa2fe52a3d7bd1757e5ae672d796b6fab5e8fa1284 dovecot-2.3.16-18.el9_8.8.tuxcare.els1.i686.rpm f541dccc12d882c2217763d65329ae1646a9228940bfd4a4ed3d57efdc34cb7a dovecot-2.3.16-18.el9_8.8.tuxcare.els1.x86_64.rpm 3817f8a69939d2fa0907525356408177c2578a622907a9783565798f94b35409 dovecot-devel-2.3.16-18.el9_8.8.tuxcare.els1.aarch64.rpm 1a5832a6df3083f867c485be03ece4d2036e4a8ea99419455bb2aec5e308cefa dovecot-devel-2.3.16-18.el9_8.8.tuxcare.els1.i686.rpm 6fc593838dac257c81b626be535926b54fbbfbf251c115bd6fc1c1f4fecfe373 dovecot-devel-2.3.16-18.el9_8.8.tuxcare.els1.x86_64.rpm 8b7442ccd0f6ddc907c8c7238845326f72639f330f93ba611d996e2b72906686 dovecot-mysql-2.3.16-18.el9_8.8.tuxcare.els1.aarch64.rpm f84c7045253feef2de196531e07d26533894c44f2b501dd1a4194b61c06b9595 dovecot-mysql-2.3.16-18.el9_8.8.tuxcare.els1.i686.rpm 68515436ee86fcceeed33b8c30455134b41ff4e5be9cda6312f578b67bab3284 dovecot-mysql-2.3.16-18.el9_8.8.tuxcare.els1.x86_64.rpm bbca18e0247cda1b764b24ee028a6c4b471320a809642f1cb82f69a78582c2f2 dovecot-pgsql-2.3.16-18.el9_8.8.tuxcare.els1.aarch64.rpm 49028f772bdc45c9d1f06e706ac8e22206da7a083f930235d5d1e854c99424ed dovecot-pgsql-2.3.16-18.el9_8.8.tuxcare.els1.i686.rpm 591a1c5c4380007ce5422858f8323a47ac5c9214795e6916f74678f0301018a6 dovecot-pgsql-2.3.16-18.el9_8.8.tuxcare.els1.x86_64.rpm d084d7033192bc3f70594e114314a9ab0da4baf6edb8ef79d18a66e9b86e12ce dovecot-pigeonhole-2.3.16-18.el9_8.8.tuxcare.els1.aarch64.rpm fc97b7b82433cb1ffe95b9d164ede15784fe2c318db24d041060930c02dde280 dovecot-pigeonhole-2.3.16-18.el9_8.8.tuxcare.els1.i686.rpm b16b2ba5d2d3896163fb4ec7a9eb83bde06877fe0437edaa6b078776a2e5c55a dovecot-pigeonhole-2.3.16-18.el9_8.8.tuxcare.els1.x86_64.rpm 38e815fc82abaa8482b20848c33babc43430884cf5613d9b3a95aca6ced410bd CLSA-2026:1792619834 TuxCare License Agreement 0 - CVE-2026-2297: importlib: SourcelessFileLoader reads .pyc files through io.open_code() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2297: importlib: SourcelessFileLoader reads .pyc files through io.open_code()

0 tuxcare-almalinux9.8-esu python-unversioned-command-3.9.25-7.el9_8.3.tuxcare.els6.noarch.rpm 5c992942ded26a8a710208ed1ec357fb45a32ee7d70f377ae4d46a0b6740a636 python3-3.9.25-7.el9_8.3.tuxcare.els6.aarch64.rpm 5ae2014c9c0e2ed1af733ecf85667ea09c70fda07e48e3e756edd36506954d18 python3-3.9.25-7.el9_8.3.tuxcare.els6.i686.rpm 4ab4fc18baf2fcf625fb5939bef578d0493aaeac427ccb11c1dc72edfec9009c python3-3.9.25-7.el9_8.3.tuxcare.els6.x86_64.rpm 2d4aa199fd759387085e3e226813901068fc51e3311dc720482bfec7650ca20b python3-debug-3.9.25-7.el9_8.3.tuxcare.els6.aarch64.rpm 204e73e7ebb1af8e56c4530aee4890ee8b0c9b3d92a59d885c1cf906853051ef python3-debug-3.9.25-7.el9_8.3.tuxcare.els6.i686.rpm c327f669d8e744639820a806b603b4af44a4d5dc30c5408d57c912567c76a4f7 python3-debug-3.9.25-7.el9_8.3.tuxcare.els6.x86_64.rpm 8f934a0fbbac7d0473e9e5889ce210d2595fe5338102546dc9c1e968fe2d6d2a python3-devel-3.9.25-7.el9_8.3.tuxcare.els6.aarch64.rpm c219879e4425b3cbfb9d3f94a238118c5dc5f9d2608c81f30ca8af84de958d85 python3-devel-3.9.25-7.el9_8.3.tuxcare.els6.i686.rpm c2cf763622b1589b3bf1379debe31a3aafb1a58f135a803cb3afd4189b0a1d52 python3-devel-3.9.25-7.el9_8.3.tuxcare.els6.x86_64.rpm 27fe3ff869f26c5d4c74a6a3bfce187ba3f8b69b4f94188d40672806d4d51397 python3-idle-3.9.25-7.el9_8.3.tuxcare.els6.aarch64.rpm ce74cd165de9b9c8e9c5963ac3681552916e404f748a98a9fecd15f3a5cb814f python3-idle-3.9.25-7.el9_8.3.tuxcare.els6.i686.rpm e2eb35971aa5796776bca9f7f2bd41168403aba9916d6d4eb3c7750d2f1bf617 python3-idle-3.9.25-7.el9_8.3.tuxcare.els6.x86_64.rpm 4eb29be85123de45184c83e21849180a0d59f2a7bbe1539176ec593df4805b55 python3-libs-3.9.25-7.el9_8.3.tuxcare.els6.aarch64.rpm 70e9e3c71c90ba562e9f24738003c6637012d669499d1484a13cb6f3194b94e3 python3-libs-3.9.25-7.el9_8.3.tuxcare.els6.i686.rpm 65663ab90e86031bf387a2910d407204185895224eb3d403a235ddf8f7a9f352 python3-libs-3.9.25-7.el9_8.3.tuxcare.els6.x86_64.rpm 4e70639ce3ad84c88c017663bfa52195245f7b5f0169ed5f3abd300488539c39 python3-test-3.9.25-7.el9_8.3.tuxcare.els6.aarch64.rpm 5b4548eaf3ebc92a9d344107d131f3cc4a7a569662503d1d7287a9ea9cba6761 python3-test-3.9.25-7.el9_8.3.tuxcare.els6.i686.rpm acdd2af340ae6a685eb5027caddb989096f208b81d26d0f1edea2c6be5fe188d python3-test-3.9.25-7.el9_8.3.tuxcare.els6.x86_64.rpm 608d00ced1186409d3c31b4ea1ef8348a1d6284b421f93b6788d019e9e60ace1 python3-tkinter-3.9.25-7.el9_8.3.tuxcare.els6.aarch64.rpm a96c2737b0c2a8abbe04985e4a96ff27b88de5b0978778315acedde46c55701e python3-tkinter-3.9.25-7.el9_8.3.tuxcare.els6.i686.rpm 9a7f1bdd25fbd818543dcff5fef4218c1a1ebc80d987bbfb3b727c0918039f22 python3-tkinter-3.9.25-7.el9_8.3.tuxcare.els6.x86_64.rpm d7eda3524601cc034e1a57ebbf7c38ec98cb7e169f5be811a37e125f4e33087b CLSA-2026:1792622256 TuxCare License Agreement 0 - CVE-2025-0840: fix stack-buffer-overflow in objdump disassemble_bytes by bounding --insn-width Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-0840: fix stack-buffer-overflow in objdump disassemble_bytes by bounding --insn-width

0 tuxcare-almalinux9.8-esu binutils-2.35.2-72.el9.tuxcare.els1.aarch64.rpm 1dd92fef0c10dc96b932ba87f732190fea3507e20abbaf4b9b43b008b5613adb binutils-2.35.2-72.el9.tuxcare.els1.i686.rpm 84ae2260e2e054caa5c91905b475911036e2fb6089284159d26509771a12ded0 binutils-2.35.2-72.el9.tuxcare.els1.x86_64.rpm 23e9467c9e390964fd8f6f10ba376ace527671a50417cdb52e9d257cbf3f6404 binutils-devel-2.35.2-72.el9.tuxcare.els1.aarch64.rpm a16d60e0b1f7b7048d9129b4d96302cb3eb839f9848455ba241eb41ff46c4da8 binutils-devel-2.35.2-72.el9.tuxcare.els1.i686.rpm aa517d25a638063d40232881bc662a76d8e8a5204783c5f626c28f7abb200c72 binutils-devel-2.35.2-72.el9.tuxcare.els1.x86_64.rpm 95e541dcada28d462e32b7a1d5114b51ee1bc6375131dfa4dfe3299835b229fa binutils-gold-2.35.2-72.el9.tuxcare.els1.aarch64.rpm 7ee34d737215e59621eee79a503168793614b3ab0701588cd99cb3356df8570b binutils-gold-2.35.2-72.el9.tuxcare.els1.i686.rpm 494146a19aaddb7dd87df58b12d3c364eee7fe3b84521ccf40a0c593266fa2c3 binutils-gold-2.35.2-72.el9.tuxcare.els1.x86_64.rpm 4dcb4578fc1d28b5addfc1d98154f082bb2d9586ce88ac3bd416f97e78523446 cross-binutils-aarch64-2.35.2-72.el9.tuxcare.els1.x86_64.rpm 90b818992bb8928878e41a55e01d0f3532f79205d60672798802aed69d45b4a9 cross-binutils-ppc64le-2.35.2-72.el9.tuxcare.els1.x86_64.rpm 2b592240fed6492bfa5240aad35fff0052c2694c66730011071779ac080a2c1f cross-binutils-s390x-2.35.2-72.el9.tuxcare.els1.x86_64.rpm 12aba12765d07f5ace7fc33492d0f209883f06baaefc38f3fd4e8922a266b817 CLSA-2026:1792631198 TuxCare License Agreement 0 - CVE-2026-55059: use dataWindow().min.y when mapping the row index in SampleCountChannel::set(int, unsigned int[]) and bounds-check the row and pixel setters to prevent a heap out-of-bounds write Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55059: use dataWindow().min.y when mapping the row index in SampleCountChannel::set(int, unsigned int[]) and bounds-check the row and pixel setters to prevent a heap out-of-bounds write

0 tuxcare-almalinux9.8-esu openexr-3.1.1-3.el9_8.4.tuxcare.els4.aarch64.rpm 23f0e2da854190f8b5534f78ae0061c7cdd424e0856b8e975dd4f762811677e7 openexr-3.1.1-3.el9_8.4.tuxcare.els4.i686.rpm bb213f68cb59e1446340ae4ef13fe3ac915a68a3dc501d5ef9f87270f1c8fde9 openexr-3.1.1-3.el9_8.4.tuxcare.els4.x86_64.rpm c17bb876f2761665d3dd4f96ad0f1bb483b9c5973c1e70665b0211c8f2cc5706 openexr-devel-3.1.1-3.el9_8.4.tuxcare.els4.aarch64.rpm b6147dd79602657bfd25d7f41a8eeb8e15923a259bd32d44a0532ef1677a30eb openexr-devel-3.1.1-3.el9_8.4.tuxcare.els4.i686.rpm 80d0ea83022bfd415626fa7d3223af6de56552b99d24c43ef58cb9130d2f8754 openexr-devel-3.1.1-3.el9_8.4.tuxcare.els4.x86_64.rpm 93114632a5e59576f05d6f1aff4b08bb599e55aaab4dc066b1b79db8f670654a openexr-libs-3.1.1-3.el9_8.4.tuxcare.els4.aarch64.rpm c8b6ece45cd5b50914c95c7e80491c17e3e32fc2f03e00cf40e7877f1dcc411f openexr-libs-3.1.1-3.el9_8.4.tuxcare.els4.i686.rpm 0f5d78be8d8328df3d9cc0d1142e4be334f8174f50f268b257a050585d84bf41 openexr-libs-3.1.1-3.el9_8.4.tuxcare.els4.x86_64.rpm 97fe991cb9167651e380c4424c5c89421b94ab9695418598c35df346bf6c9c20 CLSA-2026:1792637239 TuxCare License Agreement 0 - CVE-2026-107823: escape definer user and host names in view frm Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-107823: escape definer user and host names in view frm

0 tuxcare-almalinux9.8-esu mariadb-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm c4d05f2f5d55aa3e78049695764bf4a234d513ae3aba13dbe4dfda89740338f4 mariadb-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm 8fa0094746dca09763c185df459f0c86c511b1a14e1376e6f7747ad4631d7a4b mariadb-backup-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm 95ef8c89904b4a1897cc6e5635f438c6a7bab5e2d20d6e400babf3981dfe5649 mariadb-backup-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm 349c3009c635dc8aee5064a1c35c5bfad18c1d0135b62175509b842d9a80a606 mariadb-common-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm 4cfc08d7273b3251953b0ec0b2c8b8e90d34a820551475ddd1491f6611654f74 mariadb-common-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm 095a8880e681485018406888bf60a5c37b02ad71a26a1cf546956b1f1cfd29bc mariadb-devel-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm 8193c9570a2a5e15622f9e313a1298f43a4b89173f74d4e0d1f10111070cb8d9 mariadb-devel-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm cbcb9fa498de19eb45517897fa70181714fc71bcfaad9f5fa811bf3131745a59 mariadb-embedded-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm 6eaeabe49d6360e3526b9bc6a320d28cd857d7545bc6d942a408eeb91b5a7631 mariadb-embedded-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm 81b980bad9e9e6f5de7128ff4da8a80293430858411a22a1755cbc795c53f1a9 mariadb-embedded-devel-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm f0578c75dd93ac0536c54053fa748b19b087e0996cc33a31d81e4a6c7fe67fbf mariadb-embedded-devel-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm 35da7d2c5b9a6b7b93eee2dbb5bd0b0680f63bdc3f639f7680e52c65c1daa78d mariadb-errmsg-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm 0466bf71dda7eccb2440de1e9152df6a57473330ec2557e3ced44397f978a7ae mariadb-errmsg-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm 282ec680aec0d424c0bad09c5fee9a149f769d75cd5a08bb7d3e91f107787a63 mariadb-gssapi-server-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm 6176bf889c3a065dc17b2fc9b7cabf747bf9b37eb1ad0ba61fdaf553f64b812b mariadb-gssapi-server-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm 250eec47e655f743c19001b092c5aa8d945f8e6ca24baee0ef39178530d8e294 mariadb-oqgraph-engine-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm 5c99f4a9f9a7ca57c377d936f88c3651beea7c3471e3e86b4281279a62905107 mariadb-oqgraph-engine-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm b8e809453fa6d8cef8821a94b61814b3367892833db62b5c501428abfb18f046 mariadb-pam-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm 15baa8c2a2757b4f36fc70bf1466d926921dcd5e8548a465d8fc683c59882151 mariadb-pam-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm c1e8f42c288a042198e7595515182ed9b1d85ba3baee256bb461a65f71fe5b0a mariadb-server-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm 857ebc3b419388c0bb105240fd2f5f62d576f46d270878798d02212c01a2856c mariadb-server-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm 83363548925af07685976bc9fa401977bb9eef6c75f8048f4509134b934d6403 mariadb-server-galera-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm 8b40c8ba7bcea4c9fdcd92e2601d884fa69d41ad71a380666c561053ef6604cb mariadb-server-galera-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm d5b537eb26477494edc88898fb5d0ae45db405e2735f13cf3680245995d10f9c mariadb-server-utils-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm 0e7e7a5432912cc1cf4f6b9714717f918f1bd20182d5d4182cd791c5bf57714c mariadb-server-utils-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm 92172616b31931d2a529233b25f28c480b1e1a964fba331a2ca5e68614f4fba4 mariadb-test-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.aarch64.rpm fb281448e325c531cbaf99e5fad14d1af115d7bc51472508af1f442746f80fe2 mariadb-test-10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2.x86_64.rpm eeb4133264fbf865eb322f78695632bd56230187d6adb5be0645feaed0db967d CLSA-2026:1792637615 TuxCare License Agreement 0 - CVE-2025-24294: resolv: limit decoded DNS names to 255 octets and bound the compression pointers followed per name, preventing CPU exhaustion on crafted DNS responses Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-24294: resolv: limit decoded DNS names to 255 octets and bound the compression pointers followed per name, preventing CPU exhaustion on crafted DNS responses

0 tuxcare-almalinux9.8-esu ruby-3.0.7-168.el9_8.tuxcare.els3.aarch64.rpm d7ea3269d41429f784573270a5cdc933ea0fa5726beac7966fe096388fa0bf78 ruby-3.0.7-168.el9_8.tuxcare.els3.i686.rpm c40a747e49cc8e7b145dd71ba130ff031027f5866f0353f03516717ea93d1018 ruby-3.0.7-168.el9_8.tuxcare.els3.x86_64.rpm 2c31bad77f13db47be5329d7de0d015c4a675f0792f5f04a9d6f19d36e0460d4 ruby-default-gems-3.0.7-168.el9_8.tuxcare.els3.noarch.rpm 85b8dc87d98925b6dcdc048eaa21b384ae1cc362fda733428eb300633edeeafa ruby-devel-3.0.7-168.el9_8.tuxcare.els3.aarch64.rpm b314da0b631326379002d95e4008232f3a9f6a2f12eedf4e6bcb23859583a408 ruby-devel-3.0.7-168.el9_8.tuxcare.els3.i686.rpm 538b2edcef8fd14cb973a2e22c9f4b9106368ad6deb5fcda442ea820428b3cba ruby-devel-3.0.7-168.el9_8.tuxcare.els3.x86_64.rpm 476e358938209b5f624a26ade5c3979cb03e60008ba4abe6390af64e2b671cc0 ruby-doc-3.0.7-168.el9_8.tuxcare.els3.noarch.rpm fc4fcb93365c65e0f8f429ddae82936d7fd1486509448f73d1b44aa1c45384bd ruby-libs-3.0.7-168.el9_8.tuxcare.els3.aarch64.rpm 97dcdcb73223367b7e852c12af9b7a0d60e9a774ae66d6bb6b5c04c02ae03fd4 ruby-libs-3.0.7-168.el9_8.tuxcare.els3.i686.rpm 227fe7d7273530efe75dd62d653e76d152333c772eee3ee375d1950e572c12dd ruby-libs-3.0.7-168.el9_8.tuxcare.els3.x86_64.rpm 90029a989725df2b626033c7810b5267d7170c2b5ede8727900b66d4261053d4 rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els3.aarch64.rpm a2dc673871ccda9c09ef61ed08c38947360496e56645f3708c1c83aeb24a6c41 rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els3.i686.rpm 75d448e63964af5ff7a4a56221855ec41365b8a6c09aaf3c520cfa51b47090de rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els3.x86_64.rpm 4a6cc9d776914634fa8100ad78d3b17622315a4bccff77cd38beb9ef92e46ac8 rubygem-bundler-2.2.33-168.el9_8.tuxcare.els3.noarch.rpm 35653c02fcc580d23128a35313f9c36d51c4cd48ba39bca8dd1eb6280c0565f4 rubygem-io-console-0.5.7-168.el9_8.tuxcare.els3.aarch64.rpm 94c3b84da400d038332ed8ed2008cf72cea51bd48f04b8c12d7b93cc404cabae rubygem-io-console-0.5.7-168.el9_8.tuxcare.els3.i686.rpm 21b82629dad09d9aefb85adb187d8a48581a4df43d459675a466541ab24dbaef rubygem-io-console-0.5.7-168.el9_8.tuxcare.els3.x86_64.rpm fb0b722e976fc1d660a83143b1579a7e7ef88ec06147582760b676ae36b08bdf rubygem-irb-1.3.5-168.el9_8.tuxcare.els3.noarch.rpm 453d2e808bc3cd0cc8ac8c87fef34a64fd418a7e0c7f998151f7d34771140fc6 rubygem-json-2.5.1-168.el9_8.tuxcare.els3.aarch64.rpm 814949795a5ab249cb016ff56d2f57f671450dc918f763743aa1be31102f4a70 rubygem-json-2.5.1-168.el9_8.tuxcare.els3.i686.rpm 8ab9c2b97b39e2d7c636229d16df5503de520ed635f69dc383085ce974b2a2ac rubygem-json-2.5.1-168.el9_8.tuxcare.els3.x86_64.rpm 8672b41361de2c318f92d60e11ca67e838ab6a158e0f5a57e71fd493ddb3677d rubygem-minitest-5.14.2-168.el9_8.tuxcare.els3.noarch.rpm 13fab9bb279509d5ae61607c9d0f196cc218bdf43d9f0a987e2eac0d64ac8b44 rubygem-power_assert-1.2.1-168.el9_8.tuxcare.els3.noarch.rpm 45d427864fd0af2459a1ee060755d39f4899209871d4105c404700c2fc8d8dd6 rubygem-psych-3.3.2-168.el9_8.tuxcare.els3.aarch64.rpm 73658208fc24dbfcb0702ce815316c455c120e24111ab85869081f2f5bbc05d5 rubygem-psych-3.3.2-168.el9_8.tuxcare.els3.i686.rpm ece2e98f936dfd8685ef298ba127388b4731d5dc7a3d57cf69076205e546d8d7 rubygem-psych-3.3.2-168.el9_8.tuxcare.els3.x86_64.rpm 51fb19a46e101e65fde9cb9d1301d7c0726aa18738119c833d1452008d21c0b2 rubygem-rake-13.0.3-168.el9_8.tuxcare.els3.noarch.rpm 0ecc388d2cb78cf59363309620327d466bc73a12299e17a9f1edb3a2ed0e5f8d rubygem-rbs-1.4.0-168.el9_8.tuxcare.els3.noarch.rpm 74a55f51d4afc84a5956c8f6d01012a0297d1f1e899f33bb817a86ed15387762 rubygem-rdoc-6.3.4.1-168.el9_8.tuxcare.els3.noarch.rpm 43e172532da4d6135785084fa3f3d0733d6cf906704e893d312f04ed0870aabf rubygem-rexml-3.2.5-168.el9_8.tuxcare.els3.noarch.rpm 2f7e4aaadc9a28c833cc44f996f53bc68109bf21fc6f7805ad3d5b4592c99504 rubygem-rss-0.2.9-168.el9_8.tuxcare.els3.noarch.rpm d99336221f946de5baabd17b1a7f6e8d90f2af5e8248ba3424f0eab3a06a8095 rubygem-test-unit-3.3.7-168.el9_8.tuxcare.els3.noarch.rpm 2778fc284793140f5724ec765cb455939af11a49c3250b8e40e0cd9852b568a3 rubygem-typeprof-0.15.2-168.el9_8.tuxcare.els3.noarch.rpm b535129bc0d20b1a4a39a96d9890de2db1c0e5d3c5533c6b05b7dd212ae7de02 rubygems-3.2.33-168.el9_8.tuxcare.els3.noarch.rpm e5b2650ab0fbab1a1a0f4945b82f9a563649e81ad3bb7715fd1f6333d45e845b rubygems-devel-3.2.33-168.el9_8.tuxcare.els3.noarch.rpm 19251909422a6c86ab2e090dee8f88522ad092073a6f8003021c7a7fc9a8d539 CLSA-2026:1792655540 TuxCare License Agreement 0 - Rebase to ghostscript-9.54.0-19.el9_8.3 - CVE-2026-101258: -dSAFER sandbox bypass via a Type 5 shading out-of-bounds write and a procedure-stream use-after-free, fixed by the vendor - the vendor's 0001-pdfwrite-bound-check-control-stack-in-type-1-2-font-.patch is not applied: its single devices/vector/gdevpsfx.c hunk is already carried by our Patch1010, which additionally repairs the CS_CHECK_IPSTACK off-by-one in base/gxtype1.h and adds the matching control-stack checks in gs_type1_piece_codes() in base/gxtype1.c None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase to ghostscript-9.54.0-19.el9_8.3 - CVE-2026-101258: -dSAFER sandbox bypass via a Type 5 shading out-of-bounds write and a procedure-stream use-after-free, fixed by the vendor - the vendor's 0001-pdfwrite-bound-check-control-stack-in-type-1-2-font-.patch is not applied: its single devices/vector/gdevpsfx.c hunk is already carried by our Patch1010, which additionally repairs the CS_CHECK_IPSTACK off-by-one in base/gxtype1.h and adds the matching control-stack checks in gs_type1_piece_codes() in base/gxtype1.c

0 tuxcare-almalinux9.8-esu ghostscript-9.54.0-19.el9_8.3.tuxcare.els1.aarch64.rpm a0628ed3413b215bde4a78064c97ba4d03db6b56cbe279972c52ad208cefdbb6 ghostscript-9.54.0-19.el9_8.3.tuxcare.els1.i686.rpm bd838e3592495ce3f40ae201f2c35181d2bfc6946a6b0562ae60d943cf985565 ghostscript-9.54.0-19.el9_8.3.tuxcare.els1.x86_64.rpm def3a1cacae5215ef00b49f8d77eade316efd2cf558a85bd1b8a4a82999e3b0c ghostscript-doc-9.54.0-19.el9_8.3.tuxcare.els1.noarch.rpm 7ea5611c201964974882b175540d7dd9d3cffabebdbcf7bc626420905ef8a731 ghostscript-gtk-9.54.0-19.el9_8.3.tuxcare.els1.aarch64.rpm e5a4cb702977160d5dd485398c340621062d1bd45ba2819e85878e6973a2082d ghostscript-gtk-9.54.0-19.el9_8.3.tuxcare.els1.i686.rpm c6d7a8210ffc4e3ad2b58b46f617da7e909152004fb4121d20a12d7e475a01b1 ghostscript-gtk-9.54.0-19.el9_8.3.tuxcare.els1.x86_64.rpm 262f111b1ac66afaa8866116cd9ccc4ae74e9ff572ddf146fabf265a944860fa ghostscript-tools-dvipdf-9.54.0-19.el9_8.3.tuxcare.els1.aarch64.rpm e01af503477883981b6eafd3dd576a0e4fb6f2240cda6b2a78d81c9f4e71f1e7 ghostscript-tools-dvipdf-9.54.0-19.el9_8.3.tuxcare.els1.i686.rpm 28bee02e8e7c573f43de69cca7d9ead8555b2eca476d8bd7f6ff2f370f20ca51 ghostscript-tools-dvipdf-9.54.0-19.el9_8.3.tuxcare.els1.x86_64.rpm 4cdf4a41f47430ab39a1144dbf45d900df96057f5822d69af2520aae39042197 ghostscript-tools-fonts-9.54.0-19.el9_8.3.tuxcare.els1.aarch64.rpm 8d7f981bdf90d6b95bef4878d96f11b3bb795f6d777f9405b4824d9d0a647373 ghostscript-tools-fonts-9.54.0-19.el9_8.3.tuxcare.els1.i686.rpm 0087478a261779b71c379c54d2e6de3f21240590d9243c580079a1e58e24a582 ghostscript-tools-fonts-9.54.0-19.el9_8.3.tuxcare.els1.x86_64.rpm 2d1093af834fbffb76d0054bf84ad4ab634ffd065a88b1f51b74363d0b5447be ghostscript-tools-printing-9.54.0-19.el9_8.3.tuxcare.els1.aarch64.rpm 3a512cedada9d33e6a532123191b32411cd0540ee76cb06911b62e6d73c63973 ghostscript-tools-printing-9.54.0-19.el9_8.3.tuxcare.els1.i686.rpm 6d38bf13d123b1f570e58bf202332be36833fb965d227f6d70a5fc620dba15d3 ghostscript-tools-printing-9.54.0-19.el9_8.3.tuxcare.els1.x86_64.rpm 3f1cf6a6e964957358f0015d9b1c573e592ed73a0c3951fe79225e66e8374750 ghostscript-x11-9.54.0-19.el9_8.3.tuxcare.els1.aarch64.rpm 1172f1e192d169f19febdd34128db7251da036745a1d0e2bddb4946ec425fa89 ghostscript-x11-9.54.0-19.el9_8.3.tuxcare.els1.i686.rpm a5244196eaa06d2eade513076f28215e8e4295114b1329d4abddb1f297d88f20 ghostscript-x11-9.54.0-19.el9_8.3.tuxcare.els1.x86_64.rpm fe30754e855040f5aee6aa0ab024ca31e53aa3bebd273ce8e60ee529e1d00022 libgs-9.54.0-19.el9_8.3.tuxcare.els1.aarch64.rpm c790eaa7ebbd261521b51fdf4489596684b592b7ae1a766d10ffa4e4d8bfa45a libgs-9.54.0-19.el9_8.3.tuxcare.els1.i686.rpm f6c387c15cce2e4b101cba46e76aa1cf60fa56bfddf5abcbac5ed710631d5d51 libgs-9.54.0-19.el9_8.3.tuxcare.els1.x86_64.rpm 184e455735bcf24c125b57d843696768ec56bc5577d312a43bd3534133f122ce libgs-devel-9.54.0-19.el9_8.3.tuxcare.els1.aarch64.rpm 67bd165396ed73566b392719564ad27405be3066469852f9e937bb59dbf93aeb libgs-devel-9.54.0-19.el9_8.3.tuxcare.els1.i686.rpm cae0d95e3a437a5ae191ebcfb00378d97c1afb783d7d7da86390f51304dc4cc3 libgs-devel-9.54.0-19.el9_8.3.tuxcare.els1.x86_64.rpm 3fa9af75c562561e8df9bb7182cc96edd111020cb1a25e8d1525f3c00b72e247 CLSA-2026:1792667094 TuxCare License Agreement 0 - CVE-2026-39821: reject xn-- labels that decode to all-ASCII in the vendored golang.org/x/net/idna package; the vendor fix is inert when built with Go 1.26 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-39821: reject xn-- labels that decode to all-ASCII in the vendored golang.org/x/net/idna package; the vendor fix is inert when built with Go 1.26

0 tuxcare-almalinux9.8-esu git-lfs-3.7.1-4.el9_8.3.tuxcare.els1.aarch64.rpm ab7878cac792d95665ffbc7461080640ec885377a5db36d271bd5a031eb3a9de git-lfs-3.7.1-4.el9_8.3.tuxcare.els1.x86_64.rpm 58db425771f03fb348d3d28fe0bd0dc7e678dac750f0aea6c1f0d6519422aa08 CLSA-2026:1792694728 TuxCare License Agreement 0 - CVE-2025-43961: out-of-bounds read in the Fujifilm 0xf00c tag parser in parse_tiff_ifd - CVE-2025-43962: out-of-bounds read in phase_one_correct tag 0x412 processing with large w0/w1 values - CVE-2025-43963: out-of-bounds access in phase_one_correct, split_col and split_row not checked for tags 0x041f/0x0431 - CVE-2025-43964: phase_one_correct tag 0x412 processing does not enforce minimum w0/w1 values - CVE-2026-5342: out-of-bounds read in nikon_load_padded_packed_raw Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-43961: out-of-bounds read in the Fujifilm 0xf00c tag parser in parse_tiff_ifd - CVE-2025-43962: out-of-bounds read in phase_one_correct tag 0x412 processing with large w0/w1 values - CVE-2025-43963: out-of-bounds access in phase_one_correct, split_col and split_row not checked for tags 0x041f/0x0431 - CVE-2025-43964: phase_one_correct tag 0x412 processing does not enforce minimum w0/w1 values - CVE-2026-5342: out-of-bounds read in nikon_load_padded_packed_raw

0 tuxcare-almalinux9.8-esu LibRaw-0.21.1-2.el9_8.1.tuxcare.els1.aarch64.rpm cf4a30cdf02bcb8d950f0ba38d4746416357f3adc66b343f2a7b26a4b873815e LibRaw-0.21.1-2.el9_8.1.tuxcare.els1.i686.rpm ab633012355a7226bcd06d8750be4b9921ed31ef24305f07b3fcc1a3183b7fac LibRaw-0.21.1-2.el9_8.1.tuxcare.els1.x86_64.rpm 48d3936d6376345ae5d965ab4fd47f7dbf1ef17fa70072b271cd195532f49ec7 LibRaw-devel-0.21.1-2.el9_8.1.tuxcare.els1.aarch64.rpm 241c9b467dea1f9bba544b218741ff81ff8d2f141dc6a20d689c0a118685d275 LibRaw-devel-0.21.1-2.el9_8.1.tuxcare.els1.i686.rpm 49c4b571a8b8bba2a0289e0e9735dc7dd74ae7a5f1c86bebde11c0fef0b54041 LibRaw-devel-0.21.1-2.el9_8.1.tuxcare.els1.x86_64.rpm bf3e961a4762f2b9176899e3e0fdc07f0b4e1852b13b50ea55490e0240feb183 LibRaw-samples-0.21.1-2.el9_8.1.tuxcare.els1.aarch64.rpm e8d5526b8b8c85fef687b69bdefe2b2a363de4f451cf090461f1f98e84646465 LibRaw-samples-0.21.1-2.el9_8.1.tuxcare.els1.i686.rpm d91e484b245dc7083f9f3340604b1eb996c8ab7f2bf2e46ce598c9d7744a3b77 LibRaw-samples-0.21.1-2.el9_8.1.tuxcare.els1.x86_64.rpm 8928d6a402b5daea065e801f52cf43de4d2cc07db70d3edba3483537e37f535a LibRaw-static-0.21.1-2.el9_8.1.tuxcare.els1.aarch64.rpm 024a41ecb679e652b85aaebe95472c8331b0782bc3d113c3427037833d3074b9 LibRaw-static-0.21.1-2.el9_8.1.tuxcare.els1.i686.rpm 3ab04abdb97769d51b7bbf1f16064737f5e9f76a2c4a94c119ea234dba736ecb LibRaw-static-0.21.1-2.el9_8.1.tuxcare.els1.x86_64.rpm 126e865908d2ceabdca4c0fcaa88abb11872718c87afcab71332f189de8a560a CLSA-2026:1792698028 TuxCare License Agreement 0 - CVE-2026-97205: limit pending asynchronous operations per request to NGX_HTTP_MAX_BLOCKED so the 8-bit r->main->blocked counter cannot wrap Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-97205: limit pending asynchronous operations per request to NGX_HTTP_MAX_BLOCKED so the 8-bit r->main->blocked counter cannot wrap

0 tuxcare-almalinux9.8-esu nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm 7e93def6dd8bc33ce584930ba70381a085c2bc48c30766ad6d52e5255fcad7ba nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm f95b8fee6dc773323a2bbcfebc0dc131b38c9927cbae2e46178268285c9b0886 nginx-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm 1bb99b1dc01f86cd463afea629b09b07ad20cc1a2e404b29cf1f5780ec6c5d25 nginx-all-modules-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.noarch.rpm e899e276f1c6908af7872c31338e345e4584f592f7630e5aeea543ea12a3cb4b nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm d7e2bf01d146af63eb3aba4a3c8e2cefd1aa3dce9f54dc7e859f0d38336eef9e nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm 9bc226170c23037dd1bfc00a9126a5d8071e167de2e7a6b9b9d9ef9eb4e80ef7 nginx-core-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm afd5378fc4bdca063befcc44dd4c705274acca7c3c25a89298cb166eec9a2067 nginx-filesystem-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.noarch.rpm 4ecf33738064d745ef7c8a3d8377fef7db25f261a1a69290ba722ca4dfbfe668 nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm d6fa4c9496355f7a33335f2a8b938e1ef4f68dfa4bcba95e201d8163e12b38d9 nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm 867b247df84117b64429724398a0d4232595d115b92e5aca98baac1f9f408dde nginx-mod-devel-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm f5534a9542883030acd2242e978341c5c1130a90975e83978d73e7c79f2323b8 nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm 1de3a6641df8dfc2182a18506268c0b684f2f1807b14caaf5593dda6de787800 nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm 3751d09ed945857f97be7697736dfa10fc5bda5f468ba5a8da18d9fcaef8703d nginx-mod-http-image-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm 28792903a74fe3c9499af3e6898fee2c1188ecf84f27c4771f3a295f0ff84812 nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm c770eba96554e22926f3d7803520cf1874cffbb2a45573c995fc31ab31a67cab nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm 1a0203d924e1507d0a413ceb09f2cf59adfdc71bacdac91e3398bd9d87b76497 nginx-mod-http-perl-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm 0b697bb0f430b490398f0881df32c9e5a584bde343c3e00a200c76886d74408a nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm 24bf0b3819c259c46e172bf63d6ff73ac2ac9031dca1416f48b1a9039edae19d nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm 5513f39c1aeb32f29b6dd497bbc7dfcb54d39138130b04799b894b67cead2542 nginx-mod-http-xslt-filter-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm 37e94e4252e00cb24031b6d6589fc34a3f6c558a4274c2ced15c1a64575e4b52 nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm 03ef257483000207cceabc676817833a86000b863ff2ca2101da4482e11a5dbe nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm 0d1a805dbeda3f8126ab259f65f8f68bd96f6d701a97cfdfd5c655c56b17230b nginx-mod-mail-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm 135384bc6bce16b643d83712647cc7f6a47f912fff1107aaf31782a046637dad nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.aarch64.rpm 1f888ce0bc5b6dbb0903135a1ff72b2f32f9db07f7bb3ded4dce32ebed659b67 nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.i686.rpm 5156eb31b3ed75cc7b0a5b8d078f3add96fe332eaf037833b53d1fdfead529c4 nginx-mod-stream-1.20.1-28.el9_8.6.alma.1.tuxcare.els3.x86_64.rpm 5ba64838b59a6cb11456047bf0b09ee9f848c5c9bda3b40299247e30c78b29d1 CLSA-2026:1792702950 TuxCare License Agreement 0 - update to CKBI 2.92 from NSS 3.131.1 - updated certificates: - # Certificate "Izenpe.com" - # Certificate "GlobalSign Root CA" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Certum Root CA" - # Certificate "Comodo AAA Services root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - # Certificate "COMODO ECC Certification Authority" - # Certificate "OISTE WISeKey Global Root GA CA" - # Certificate "NetLock Arany (Class Gold) Főtanúsítvány" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "GlobalSign Root CA - R3" - # Certificate "Go Daddy Root Certificate Authority - G2" - # Certificate "Starfield Root Certificate Authority - G2" - # Certificate "Starfield Services Root Certificate Authority - G2" - # Certificate "Certum Trusted Network CA" - # Certificate "TWCA Root Certification Authority" - # Certificate "Security Communication RootCA2" - # Certificate "Actalis Authentication Root CA" - # Certificate "D-TRUST Root Class 3 CA 2 2009" - # Certificate "D-TRUST Root Class 3 CA 2 EV 2009" - # Certificate "CA Disig Root R2" - # Certificate "ACCVRAIZ1" - # Certificate "TWCA Global Root CA" - # Certificate "QuoVadis Root CA 1 G3" - # Certificate "QuoVadis Root CA 2 G3" - # Certificate "QuoVadis Root CA 3 G3" - # Certificate "DigiCert Assured ID Root G2" - # Certificate "DigiCert Assured ID Root G3" - # Certificate "DigiCert Global Root G2" - # Certificate "DigiCert Global Root G3" - # Certificate "DigiCert Trusted Root G4" - # Certificate "COMODO RSA Certification Authority" - # Certificate "USERTrust RSA Certification Authority" - # Certificate "USERTrust ECC Certification Authority" - # Certificate "GlobalSign ECC Root CA - R5" - # Certificate "IdenTrust Commercial Root CA 1" - # Certificate "CFCA EV ROOT" - # Certificate "OISTE WISeKey Global Root GB CA" - # Certificate "Certum Trusted Network CA 2" - # Certificate "Hellenic Academic and Research Institutions RootCA 2015" - # Certificate "Hellenic Academic and Research Institutions ECC RootCA 2015" - # Certificate "AC RAIZ FNMT-RCM" - # Certificate "Amazon Root CA 1" - # Certificate "Amazon Root CA 2" - # Certificate "Amazon Root CA 3" - # Certificate "Amazon Root CA 4" - # Certificate "GDCA TrustAUTH R5 ROOT" - # Certificate "SSL.com Root Certification Authority RSA" - # Certificate "SSL.com Root Certification Authority ECC" - # Certificate "SSL.com EV Root Certification Authority RSA R2" - # Certificate "SSL.com EV Root Certification Authority ECC" - # Certificate "GlobalSign Root CA - R6" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "UCA Global G2 Root" - # Certificate "UCA Extended Validation Root" - # Certificate "Certigna Root CA" - # Certificate "Entrust Root Certification Authority - G4" - # Certificate "e-Szigno Root CA 2017" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "GlobalSign ECC Root CA - R4" - # Certificate "GTS Root R1" - # Certificate "GTS Root R3" - # Certificate "GTS Root R4" - # Certificate "Security Communication ECC RootCA1" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" - removed certificates: - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "A-Trust-Root-05" - # Certificate "A-Trust-Qual-02" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "E-Tugra Certification Authority" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "CFCA GT CA" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "CCA India 2011" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "SITHS CA v3" - # Certificate "ANF Server CA" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "StartCom Certification Authority" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Chambers of Commerce Root - 2008" - # Certificate "Global Chambersign Root - 2008" - # Certificate "CNNIC ROOT" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "CA Disig" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "VAS Latvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "A-Trust-nQual-03" - # Certificate "KISA RootCA 1" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Juur-SK" - # Certificate "SECOM Trust.net" - # Certificate "Chambers of Commerce Root" - # Certificate "Global Chambersign Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Sonera Class2 CA" - # Certificate "Baltimore CyberTrust Root" - # Certificate "VeriSign, Inc." - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "GTE CyberTrust Global Root" - # Certificate "Thawte Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "UTN-USERFirst-Object" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "emSign ECC Root CA - G3" - # Certificate "thawte Primary Root CA" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - added certificates: - # Certificate "OISTE Client Root ECC G1" - # Certificate "OISTE Client Root RSA G1" - # Certificate "OISTE Server Root ECC G1" - # Certificate "OISTE Server Root RSA G1" - # Certificate "e-Szigno TLS Root CA 2023" - # Certificate "SecureSign Root CA16" - # Certificate "SECOM TLS RSA Root CA 2024" - # Certificate "SECOM TLS ECC Root CA 2024" - # Certificate "SECOM SMIME RSA Root CA 2024" - # Certificate "Telia EC Email Root CA v3" - # Certificate "Telia EC TLS Root CA v3" - # Certificate "Telia RSA Email Root CA v3" - # Certificate "Telia RSA TLS Root CA v3" - distrusted certificates: - # Certificate "AC Raíz Certicámara S.A." - # Certificate "ACEDICOM Root" - # Certificate "AffirmTrust Networking" - # Certificate "America Online Root Certification Authority 1" - # Certificate "CA Disig Root R1" - # Certificate "Certinomis - Autorité Racine" - # Certificate "ComSign CA" - # Certificate "ComSign Secured CA" - # Certificate "EC-ACC" - # Certificate "EE Certification Centre Root CA" - # Certificate "Entrust Root Certification Authority" - # Certificate "Hellenic Academic and Research Institutions RootCA 2011" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "Secure Global CA" - # Certificate "SecureSign RootCA11" - # Certificate "SecureTrust CA" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "SwissSign Platinum CA - G2" - # Certificate "SwissSign Silver CA - G2" - # Certificate "TeliaSonera Root CA v1" - # Certificate "XRamp Global CA Root" - # Certificate "certSIGN ROOT CA" - # Certificate "ePKI Root Certification Authority" - no longer trusted for TLS server authentication: - # Certificate "QuoVadis Root CA 2" - # Certificate "QuoVadis Root CA 3" - # Certificate "DigiCert Assured ID Root CA" - # Certificate "DigiCert Global Root CA" - # Certificate "DigiCert High Assurance EV Root CA" - # Certificate "SwissSign Gold CA - G2" - # Certificate "COMODO Certification Authority" - # Certificate "Certigna" - # Certificate "Atos TrustedRoot 2011" - # Certificate "Entrust Root Certification Authority - G2" - # Certificate "Entrust Root Certification Authority - EC1" - # Certificate "GTS Root R2" None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update to CKBI 2.92 from NSS 3.131.1 - updated certificates: - # Certificate "Izenpe.com" - # Certificate "GlobalSign Root CA" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Certum Root CA" - # Certificate "Comodo AAA Services root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - # Certificate "COMODO ECC Certification Authority" - # Certificate "OISTE WISeKey Global Root GA CA" - # Certificate "NetLock Arany (Class Gold) Főtanúsítvány" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "GlobalSign Root CA - R3" - # Certificate "Go Daddy Root Certificate Authority - G2" - # Certificate "Starfield Root Certificate Authority - G2" - # Certificate "Starfield Services Root Certificate Authority - G2" - # Certificate "Certum Trusted Network CA" - # Certificate "TWCA Root Certification Authority" - # Certificate "Security Communication RootCA2" - # Certificate "Actalis Authentication Root CA" - # Certificate "D-TRUST Root Class 3 CA 2 2009" - # Certificate "D-TRUST Root Class 3 CA 2 EV 2009" - # Certificate "CA Disig Root R2" - # Certificate "ACCVRAIZ1" - # Certificate "TWCA Global Root CA" - # Certificate "QuoVadis Root CA 1 G3" - # Certificate "QuoVadis Root CA 2 G3" - # Certificate "QuoVadis Root CA 3 G3" - # Certificate "DigiCert Assured ID Root G2" - # Certificate "DigiCert Assured ID Root G3" - # Certificate "DigiCert Global Root G2" - # Certificate "DigiCert Global Root G3" - # Certificate "DigiCert Trusted Root G4" - # Certificate "COMODO RSA Certification Authority" - # Certificate "USERTrust RSA Certification Authority" - # Certificate "USERTrust ECC Certification Authority" - # Certificate "GlobalSign ECC Root CA - R5" - # Certificate "IdenTrust Commercial Root CA 1" - # Certificate "CFCA EV ROOT" - # Certificate "OISTE WISeKey Global Root GB CA" - # Certificate "Certum Trusted Network CA 2" - # Certificate "Hellenic Academic and Research Institutions RootCA 2015" - # Certificate "Hellenic Academic and Research Institutions ECC RootCA 2015" - # Certificate "AC RAIZ FNMT-RCM" - # Certificate "Amazon Root CA 1" - # Certificate "Amazon Root CA 2" - # Certificate "Amazon Root CA 3" - # Certificate "Amazon Root CA 4" - # Certificate "GDCA TrustAUTH R5 ROOT" - # Certificate "SSL.com Root Certification Authority RSA" - # Certificate "SSL.com Root Certification Authority ECC" - # Certificate "SSL.com EV Root Certification Authority RSA R2" - # Certificate "SSL.com EV Root Certification Authority ECC" - # Certificate "GlobalSign Root CA - R6" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "UCA Global G2 Root" - # Certificate "UCA Extended Validation Root" - # Certificate "Certigna Root CA" - # Certificate "Entrust Root Certification Authority - G4" - # Certificate "e-Szigno Root CA 2017" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "GlobalSign ECC Root CA - R4" - # Certificate "GTS Root R1" - # Certificate "GTS Root R3" - # Certificate "GTS Root R4" - # Certificate "Security Communication ECC RootCA1" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" - removed certificates: - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "A-Trust-Root-05" - # Certificate "A-Trust-Qual-02" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "E-Tugra Certification Authority" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "CFCA GT CA" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "CCA India 2011" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "SITHS CA v3" - # Certificate "ANF Server CA" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "StartCom Certification Authority" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Chambers of Commerce Root - 2008" - # Certificate "Global Chambersign Root - 2008" - # Certificate "CNNIC ROOT" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "CA Disig" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "VAS Latvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "A-Trust-nQual-03" - # Certificate "KISA RootCA 1" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Juur-SK" - # Certificate "SECOM Trust.net" - # Certificate "Chambers of Commerce Root" - # Certificate "Global Chambersign Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Sonera Class2 CA" - # Certificate "Baltimore CyberTrust Root" - # Certificate "VeriSign, Inc." - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "GTE CyberTrust Global Root" - # Certificate "Thawte Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "UTN-USERFirst-Object" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "emSign ECC Root CA - G3" - # Certificate "thawte Primary Root CA" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - added certificates: - # Certificate "OISTE Client Root ECC G1" - # Certificate "OISTE Client Root RSA G1" - # Certificate "OISTE Server Root ECC G1" - # Certificate "OISTE Server Root RSA G1" - # Certificate "e-Szigno TLS Root CA 2023" - # Certificate "SecureSign Root CA16" - # Certificate "SECOM TLS RSA Root CA 2024" - # Certificate "SECOM TLS ECC Root CA 2024" - # Certificate "SECOM SMIME RSA Root CA 2024" - # Certificate "Telia EC Email Root CA v3" - # Certificate "Telia EC TLS Root CA v3" - # Certificate "Telia RSA Email Root CA v3" - # Certificate "Telia RSA TLS Root CA v3" - distrusted certificates: - # Certificate "AC Raíz Certicámara S.A." - # Certificate "ACEDICOM Root" - # Certificate "AffirmTrust Networking" - # Certificate "America Online Root Certification Authority 1" - # Certificate "CA Disig Root R1" - # Certificate "Certinomis - Autorité Racine" - # Certificate "ComSign CA" - # Certificate "ComSign Secured CA" - # Certificate "EC-ACC" - # Certificate "EE Certification Centre Root CA" - # Certificate "Entrust Root Certification Authority" - # Certificate "Hellenic Academic and Research Institutions RootCA 2011" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "Secure Global CA" - # Certificate "SecureSign RootCA11" - # Certificate "SecureTrust CA" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "SwissSign Platinum CA - G2" - # Certificate "SwissSign Silver CA - G2" - # Certificate "TeliaSonera Root CA v1" - # Certificate "XRamp Global CA Root" - # Certificate "certSIGN ROOT CA" - # Certificate "ePKI Root Certification Authority" - no longer trusted for TLS server authentication: - # Certificate "QuoVadis Root CA 2" - # Certificate "QuoVadis Root CA 3" - # Certificate "DigiCert Assured ID Root CA" - # Certificate "DigiCert Global Root CA" - # Certificate "DigiCert High Assurance EV Root CA" - # Certificate "SwissSign Gold CA - G2" - # Certificate "COMODO Certification Authority" - # Certificate "Certigna" - # Certificate "Atos TrustedRoot 2011" - # Certificate "Entrust Root Certification Authority - G2" - # Certificate "Entrust Root Certification Authority - EC1" - # Certificate "GTS Root R2"

0 tuxcare-almalinux9.8-esu ca-certificates-2026.2.92_v9.0.305-91.el9.tuxcare.els1.noarch.rpm d46309ab7075ca661ae808e1028e34f7f25ec6d55472f696d7a83c3c610bb827 CLSA-2026:1791875223 TuxCare License Agreement 0 - CVE-2026-33186: reject gRPC :path values that omit the leading slash in Server.handleStream (vendored google.golang.org/grpc) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33186: reject gRPC :path values that omit the leading slash in Server.handleStream (vendored google.golang.org/grpc)

0 tuxcare-almalinux9.8-esu ignition-2.26.0-1.el9_8.tuxcare.els2.aarch64.rpm 702abc7a508cf8cdc269fca48c87613c83e99b82ca03a4b11add20faf1acac40 ignition-2.26.0-1.el9_8.tuxcare.els2.x86_64.rpm ab254759a181aacd3273ab21b89eebb4d9082c4a3a399bb1da1d9d9c361f910a ignition-edge-2.26.0-1.el9_8.tuxcare.els2.aarch64.rpm 017294381032bf594381b07eb1e40b82b88bc10bf93017b702c2457e1e425411 ignition-edge-2.26.0-1.el9_8.tuxcare.els2.x86_64.rpm d64955c1c2b7349a52b7873daa2c7305914838b2c5283c87bdf4169713b0fd35 ignition-grub-2.26.0-1.el9_8.tuxcare.els2.aarch64.rpm f8d009d345ec3add689b68de2f4329b4a588b7a9b75969aa593c33bce45b9a0e ignition-grub-2.26.0-1.el9_8.tuxcare.els2.x86_64.rpm 4635797e6c0f9bcb05db54388f98757ec476f480f98c6be8e1b7654d4f11105f ignition-validate-2.26.0-1.el9_8.tuxcare.els2.aarch64.rpm d90a26d9802381991bf17f1753048cbcacb079c03f3c50ee24436a4aca33ae90 ignition-validate-2.26.0-1.el9_8.tuxcare.els2.x86_64.rpm b1d94791f90c3d4b5340b4e5afe43a4eae8beff7fe6d949394a5de6553e81336 CLSA-2026:1792742333 TuxCare License Agreement 0 - CVE-2026-39821: reject xn-- labels that decode to all-ASCII in the vendored golang.org/x/net/idna package; the check shipped in x/net v0.56.0 is compiled out when built with Go 1.26 - require golang >= 1.26.6: the Go standard library fixes come from the build toolchain, an older golang would silently reopen them Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-39821: reject xn-- labels that decode to all-ASCII in the vendored golang.org/x/net/idna package; the check shipped in x/net v0.56.0 is compiled out when built with Go 1.26 - require golang >= 1.26.6: the Go standard library fixes come from the build toolchain, an older golang would silently reopen them

0 tuxcare-almalinux9.8-esu osbuild-composer-165.1-5.el9_8.alma.1.tuxcare.els1.aarch64.rpm f7bcaa74ae901a04327ae35d65a303fe4166650a196ab07c4b1e60e2dff7b38d osbuild-composer-165.1-5.el9_8.alma.1.tuxcare.els1.x86_64.rpm 4f1c335df21270d134c503841d25de5fada5f5ee0380bc8a08a2dcf09006b07e osbuild-composer-core-165.1-5.el9_8.alma.1.tuxcare.els1.aarch64.rpm 8e36af748211b211d70777afa1a8d0da6aa57f5df69008b1e0e6ef0c4b7d8cfc osbuild-composer-core-165.1-5.el9_8.alma.1.tuxcare.els1.x86_64.rpm 3d6a5672322f20d4cf40ac0f275797c4f500847f04aae19bc0295e6181e9207a osbuild-composer-tests-165.1-5.el9_8.alma.1.tuxcare.els1.aarch64.rpm 46db2164955b288de1f7944d1ee93f1be0713bd58f05d36ba5459f80a9580a74 osbuild-composer-tests-165.1-5.el9_8.alma.1.tuxcare.els1.x86_64.rpm c918b975a878e71b7d5f77e4901a94d3b5b811ed988e6e5db08ca539339d2c80 osbuild-composer-worker-165.1-5.el9_8.alma.1.tuxcare.els1.aarch64.rpm b9548b991be3d528260bec2c30f71bf4664db573b3e9b10d865abf4673a0501b osbuild-composer-worker-165.1-5.el9_8.alma.1.tuxcare.els1.x86_64.rpm e629e3e9ec7640c73d65f3c05d9bfd0e5898c13de02f61126d9340710d395633 CLSA-2026:1792747529 TuxCare License Agreement 0 - CVE-2026-105482: reject names and local addresses with null bytes in the dns resolve*() and setLocalAddress() APIs, so c-ares can no longer silently truncate the queried name - CVE-2026-106069, CVE-2026-106072: reject non-canonical IP spellings in tls.checkServerIdentity() and restore IPv6 IP SAN matching, broken by the CVE-2026-48618 fix since els15 - CVE-2026-105481: check for unread data in the OS socket buffer before http.Agent reuses a keep-alive socket and destroy the socket if any Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-105482: reject names and local addresses with null bytes in the dns resolve*() and setLocalAddress() APIs, so c-ares can no longer silently truncate the queried name - CVE-2026-106069, CVE-2026-106072: reject non-canonical IP spellings in tls.checkServerIdentity() and restore IPv6 IP SAN matching, broken by the CVE-2026-48618 fix since els15 - CVE-2026-105481: check for unread data in the OS socket buffer before http.Agent reuses a keep-alive socket and destroy the socket if any

0 tuxcare-almalinux9.8-esu nodejs-16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm 4b296b06e1616fdfbc5a7b0375cabba1cefdab2a6ca9a827003c229a1a666278 nodejs-16.20.2-8.el9_8.tuxcare.els24.i686.rpm b5feaebe7508059d0a15ea79356aa92a8ffa9b776f139fed009d44fb1ea5a30e nodejs-16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm a5f7969ffed9360d37cd52a23dd0c27795898050870f56e919ad38c4d3cfade0 nodejs-devel-16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm 2f50a3a3a942559950297002248fa47e4387315ff8c95015400802f08531c122 nodejs-devel-16.20.2-8.el9_8.tuxcare.els24.i686.rpm 5f605f4226f142483cff650cae4bf949c69972f5f6043651fb244c4b69d7f626 nodejs-devel-16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm c2dde4ab2c3c2c870bb4fa6038a1b6ea7dd29f419e7a3e898d1a8a948dc73d95 nodejs-docs-16.20.2-8.el9_8.tuxcare.els24.noarch.rpm f268496d6ef96538a8c9dd5ab757666d4d0b433276b329fab245ddcfe24057cf nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm a7a811ec44ee07f149e578b9fff7d23fd835e5bd984a3dcd571c49f40015b75f nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els24.i686.rpm 7ac412f8030c390dc8ab35ff0e8ebf7126080dc267ea97279585f15e446077f0 nodejs-full-i18n-16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm 0f9953cbf7aa6a6d62ab211a7d2e2c12e0646ac84e66ce5900d919446d791a01 nodejs-libs-16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm 944fd81b28f9fe97d803bb02b5eba701edb9a74a85ccc75afc6b9e1bfc16a082 nodejs-libs-16.20.2-8.el9_8.tuxcare.els24.i686.rpm cf6e3e1c136e60df1285eca4ed05dcbe37eaff5e93c1d217f4445e9741a301d8 nodejs-libs-16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm 07b698f5db5f839470c8f63e41e67fd6519287ddad87f7ec9d2de3e074a7ea96 npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm 9395a999ebe44d6a70542cd3ed04becfd8c3d3155fb6c630c29222ff5be91931 npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els24.i686.rpm cac570a6114558ecb022167e7974bce9471c910cba25a1e97c479543d5d1c893 npm-8.19.4_1.16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm 0b8c211d3b18ee8c13f2dcd811ac9442a500e54825c48747976cd1d8635ca427 v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els24.aarch64.rpm 683945d9332008b13214b1266632c29492a2af29f86abb32182e450f809887ae v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els24.i686.rpm 2bc8372368d5815fb885b28918e269d062f9349934122373142d2afbb59f79ef v8-devel-9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els24.x86_64.rpm 530098b435145196c6ee9e561540a9e49c25cf3913c80aefe18bfff6da6ceb6b CLSA-2026:1792753257 TuxCare License Agreement 0 - CVE-2026-56862: rebuild with newer golang 1.26.7-1.el9_8 so crypto/tls no longer treats post-handshake handshake messages as state-advancing, bounding unlimited KeyUpdate key derivation - CVE-2026-33818: rebuild with newer golang 1.26.7-1.el9_8 which caps encoding/asn1 decode nesting depth, preventing stack exhaustion from deeply nested ASN.1 input Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56862: rebuild with newer golang 1.26.7-1.el9_8 so crypto/tls no longer treats post-handshake handshake messages as state-advancing, bounding unlimited KeyUpdate key derivation - CVE-2026-33818: rebuild with newer golang 1.26.7-1.el9_8 which caps encoding/asn1 decode nesting depth, preventing stack exhaustion from deeply nested ASN.1 input

0 tuxcare-almalinux9.8-esu delve-1.26.1-1.el9_8.tuxcare.els1.aarch64.rpm 4fab8d887d93cfc323d117a138c612a711491c039b05fdcd7c1b268687a0114b delve-1.26.1-1.el9_8.tuxcare.els1.x86_64.rpm f1e9fafacbc4b93c251e2e631a446ef0e0f146776d355db198c9f21cea317647 CLSA-2026:1792753495 TuxCare License Agreement 0 - CVE-2026-68497: rebase onto 2.21.6-1.1; the fix (upstream #6127) is part of 2.21.6 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-68497: rebase onto 2.21.6-1.1; the fix (upstream #6127) is part of 2.21.6

0 tuxcare-almalinux9.8-esu pki-jackson-databind-2.21.6-1.el9_8.1.tuxcare.els2.noarch.rpm 876206b5d6ab9e37161d74f0dc5f4cf5529aeca4540cf3f3036979cb997074d0 CLSA-2026:1792755938 TuxCare License Agreement 0 - CVE-2026-111497: reject invalid block switch commands in the decoder instead of silently ignoring them Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-111497: reject invalid block switch commands in the decoder instead of silently ignoring them

0 tuxcare-almalinux9.8-esu brotli-1.0.9-10.el9_8.tuxcare.els1.aarch64.rpm eaadf9bf662c34f7965abb2f3f38d49227a8dad4156cf928b16aec51f3bb6493 brotli-1.0.9-10.el9_8.tuxcare.els1.i686.rpm 3f04b06baa0663c658076d9aa8ce671908163fb7ab08821289b137ddd79df3a7 brotli-1.0.9-10.el9_8.tuxcare.els1.x86_64.rpm a5ad6d285978d1c3c1079454104f3862238708c0017485abe61bfc3b0efecd0d brotli-devel-1.0.9-10.el9_8.tuxcare.els1.aarch64.rpm a687e2a469e8cb18324f45b45cc4d163ca9323f2e8bae93cbcbc455d4790b49b brotli-devel-1.0.9-10.el9_8.tuxcare.els1.i686.rpm 1cc4137c6fb3bdccca18a2543dcced7756089a7156fbd186f8ad4f2cee1858ae brotli-devel-1.0.9-10.el9_8.tuxcare.els1.x86_64.rpm ffab93ae0b8c351ffe1f9865a813124c9a9c4cb87104afba20208bb79622f76c libbrotli-1.0.9-10.el9_8.tuxcare.els1.aarch64.rpm 88efd77170b9400883608238d8d89425cfe3e19c34a635a2ed4e8d22294c4fd0 libbrotli-1.0.9-10.el9_8.tuxcare.els1.i686.rpm 002bfac0f05b1d52726aa58fa7d10fb7a7f3d21b796e2de1366f30ab6b247782 libbrotli-1.0.9-10.el9_8.tuxcare.els1.x86_64.rpm 101cc819ac313a4f4016114d518b1f326ac72856b52ac0abc47ea1744eb8585d python3-brotli-1.0.9-10.el9_8.tuxcare.els1.aarch64.rpm 1af541b19cb4a0f8beeae8aff8eaba149a2b8545a266a995005337abe3c63695 python3-brotli-1.0.9-10.el9_8.tuxcare.els1.i686.rpm 716063d4c4e48f7f1b763da9e6b8a3744054a1b2d07794ee1e5ae53cca810a92 python3-brotli-1.0.9-10.el9_8.tuxcare.els1.x86_64.rpm 1ee55762797118fc23cd26c6a53e52315d4215be1803d624b6afaddf987d8ff7 CLSA-2026:1792781059 TuxCare License Agreement 0 - CVE-2026-93517: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5 (GLX RenderLarge heap buffer overflow) - CVE-2026-93518: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5 (XKB ResizeKeyType numeric truncation) - CVE-2026-93519: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5 (XFixes pointer barrier event list buffer overflow) - Exclude i686: the buildroot has no pkgconfig(xkbcomp) and AlmaLinux 9 does not ship tigervnc.i686 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-93517: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5 (GLX RenderLarge heap buffer overflow) - CVE-2026-93518: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5 (XKB ResizeKeyType numeric truncation) - CVE-2026-93519: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5 (XFixes pointer barrier event list buffer overflow) - Exclude i686: the buildroot has no pkgconfig(xkbcomp) and AlmaLinux 9 does not ship tigervnc.i686

0 tuxcare-almalinux9.8-esu tigervnc-1.15.0-7.el9_8.2.tuxcare.els1.aarch64.rpm 548ba369c7932bd9f94320329b09ba96de1a0911b51f03238fc3556246c0b172 tigervnc-1.15.0-7.el9_8.2.tuxcare.els1.x86_64.rpm 1ac9e795d67bebd525de43d656ed5d9f92cd0990d12444b1a009baf4c8992002 tigervnc-icons-1.15.0-7.el9_8.2.tuxcare.els1.noarch.rpm 11839a2ea9a727104b66e58ad5c294dc84b57a09f25afbf1d99104e978f25b9b tigervnc-license-1.15.0-7.el9_8.2.tuxcare.els1.noarch.rpm 2c869922a930e2c918ea4e9bf6e166669a9c9c6809b20ff90a0e01110eeebb77 tigervnc-selinux-1.15.0-7.el9_8.2.tuxcare.els1.noarch.rpm c2e9ce9e0ce5725a3269ecb20a0b6f37e75665390698c06eaaf273350241bf38 tigervnc-server-1.15.0-7.el9_8.2.tuxcare.els1.aarch64.rpm ba6da2e10b146794a2447d92c5b8676656938a7b2e4c334e452d0919eeaff90d tigervnc-server-1.15.0-7.el9_8.2.tuxcare.els1.x86_64.rpm c1573eec59dae6bae3853b30274bb6c5f5be3bfb2b868c12c639361946d82a1a tigervnc-server-minimal-1.15.0-7.el9_8.2.tuxcare.els1.aarch64.rpm defcb065ba7823ed8aca7834dc98af056e820df0e1d10668e9569e82c403b6eb tigervnc-server-minimal-1.15.0-7.el9_8.2.tuxcare.els1.x86_64.rpm ae233de7df5a4806e850f0b65067128cb21d90b3f82395852ae528f7912c7b8c tigervnc-server-module-1.15.0-7.el9_8.2.tuxcare.els1.aarch64.rpm ceaadb0653334a5fae4874d19c49e9ec9a93c5be5cb227f7e3ec0d40ec87dce8 tigervnc-server-module-1.15.0-7.el9_8.2.tuxcare.els1.x86_64.rpm 05fc94e51daac20da77f5c0e1c49ee64cc07315ee86732e3dfcbf232d720a8d3 CLSA-2026:1792792065 TuxCare License Agreement 0 - CVE-2026-110264: regexp: fix out-of-bounds repeat stack access in Onigmo by rejecting patterns whose range-repeat or null-check count overflows the internal ID type - CVE-2026-93577, CVE-2026-97229: regexp: fix wrapped jump offsets in Onigmo by checking the quantifier expansion size without integer overflow and rejecting compiled programs too big for their offset type Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-110264: regexp: fix out-of-bounds repeat stack access in Onigmo by rejecting patterns whose range-repeat or null-check count overflows the internal ID type - CVE-2026-93577, CVE-2026-97229: regexp: fix wrapped jump offsets in Onigmo by checking the quantifier expansion size without integer overflow and rejecting compiled programs too big for their offset type

0 tuxcare-almalinux9.8-esu ruby-3.0.7-168.el9_8.tuxcare.els4.aarch64.rpm 0077a9cb83b393a6060c06c6f3d5b1c20ff3cf9bdb01b40a7a2b1846ecc4853a ruby-3.0.7-168.el9_8.tuxcare.els4.i686.rpm 4d5f757e070c74bd1070e0fbe69ae4d2546c3c0fe605b80fb921700e33dca658 ruby-3.0.7-168.el9_8.tuxcare.els4.x86_64.rpm dd1844d42a545c1732a639d6027221e68c5149adc6384ad81bb9ff4261c6c111 ruby-default-gems-3.0.7-168.el9_8.tuxcare.els4.noarch.rpm bf79147a74408ab59b01955189d9c5211022a7a666999fdfc5d90ebc7a76a227 ruby-devel-3.0.7-168.el9_8.tuxcare.els4.aarch64.rpm 2b5950698c24a6e28cf9866366e9d70929af41c2d077c56f48581c5727a9f179 ruby-devel-3.0.7-168.el9_8.tuxcare.els4.i686.rpm 859cf3771d607b2351f6ceca34d99a65b645b82c421ae8d4ff98b7321168ec1b ruby-devel-3.0.7-168.el9_8.tuxcare.els4.x86_64.rpm fb66130382e2ff5c5c22f5ec16e37465775b651e57d4d8b826cb47995617b963 ruby-doc-3.0.7-168.el9_8.tuxcare.els4.noarch.rpm d8456a5089f8f7a74e203a34bce6345a4f3ad50d072c928b2041007c931b0561 ruby-libs-3.0.7-168.el9_8.tuxcare.els4.aarch64.rpm b6c5240035841f4e73f644045062fa8697da7bec97da05173b22d5a3d10db6c5 ruby-libs-3.0.7-168.el9_8.tuxcare.els4.i686.rpm 8d42356c637b373092a45729c608ae32e8839b882ea9ec88c6d3dbc09741ecaa ruby-libs-3.0.7-168.el9_8.tuxcare.els4.x86_64.rpm 9714e0bd4c83b0997c09f387355be20db01bb3a15552c88581734601ac6b28f1 rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els4.aarch64.rpm 22149e4cc1b00ff36c0cf1bd3e3f752bb2f1cbe8162e62829793281ffb308518 rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els4.i686.rpm e4fa6652896d397f5acb8cbb88d07ac1b809b2dcc41702138dafafe721b7ff5f rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els4.x86_64.rpm 196503ffd6f7239658de185f3c616e52fc2c879a96a3b060248b43db11f0e9d2 rubygem-bundler-2.2.33-168.el9_8.tuxcare.els4.noarch.rpm 247953fe433c15bc7b2281cd2ed291db4e24dfac5655f70968e74b6d310214d2 rubygem-io-console-0.5.7-168.el9_8.tuxcare.els4.aarch64.rpm 20a7a588e540fcc9e6a39433d8b15a68faa7b26abb2a545a1e8f435ac62ebd70 rubygem-io-console-0.5.7-168.el9_8.tuxcare.els4.i686.rpm 2eedbeccbf3388b19b86477b82d8804044384e6671d226d791bee20dacdb0974 rubygem-io-console-0.5.7-168.el9_8.tuxcare.els4.x86_64.rpm eddafb6801c7d99bf0ab0c069b00f143c5242a15f0782d090e84149c92871b33 rubygem-irb-1.3.5-168.el9_8.tuxcare.els4.noarch.rpm f286a499cefafe055ba5a2d539af12b501da05dda7647b080e552afd8e0d04c3 rubygem-json-2.5.1-168.el9_8.tuxcare.els4.aarch64.rpm c0a17c0d6a3278fba36c4791a196ac1973e762bde491e0be7fbffe02010364af rubygem-json-2.5.1-168.el9_8.tuxcare.els4.i686.rpm 2da3d80dc56c664c156d790018ee38566260ccf4fc9bb8ec78a684f535f0eb54 rubygem-json-2.5.1-168.el9_8.tuxcare.els4.x86_64.rpm b30354d538b47cb781f557b211af4ea2f04f438398bc91224fb373d615e9e4c1 rubygem-minitest-5.14.2-168.el9_8.tuxcare.els4.noarch.rpm 35e80b583e7282c1a751cfb65aab93aa5c1bf0832fd389b10d0882d109ed09b5 rubygem-power_assert-1.2.1-168.el9_8.tuxcare.els4.noarch.rpm 723e84602a64e01b0571035cedf7a0df2059df9e72e678555b7cbdccfebc472c rubygem-psych-3.3.2-168.el9_8.tuxcare.els4.aarch64.rpm 97517aac836244830207cf4db50328dda613a103415898ba8957d45ffc31b0b4 rubygem-psych-3.3.2-168.el9_8.tuxcare.els4.i686.rpm 32de414affe876fc4a6e02fbe6063bd1e3c8aa164eea0f104e17828ebc12f0e0 rubygem-psych-3.3.2-168.el9_8.tuxcare.els4.x86_64.rpm ca97817abfda0d37b65413e990c65f9a93c662e83d9a7523e863931a0d86211d rubygem-rake-13.0.3-168.el9_8.tuxcare.els4.noarch.rpm c7aaa32a866b75ccb0391e55e842f93074dd6b71e95260a3a265c87871289ca6 rubygem-rbs-1.4.0-168.el9_8.tuxcare.els4.noarch.rpm f4f961da0bc77b92f6319f710704647bc36fbff47c482bf00b6ad0a64d6cfcc7 rubygem-rdoc-6.3.4.1-168.el9_8.tuxcare.els4.noarch.rpm 88b3b176982101e1d2687310ac70084a21134de96ab4ce7f70e38279ce6f0867 rubygem-rexml-3.2.5-168.el9_8.tuxcare.els4.noarch.rpm 191e91d5e4149234567ddd23b137d9026fbc89c414927326000425f90bdf6224 rubygem-rss-0.2.9-168.el9_8.tuxcare.els4.noarch.rpm c407313c3e6ceec821393a064835b62f91096ec5c7925c3e744811e2498fd6b6 rubygem-test-unit-3.3.7-168.el9_8.tuxcare.els4.noarch.rpm e357f89f8e923c9753fc58082cb4efd313d65a74a87da1615304a296be19d103 rubygem-typeprof-0.15.2-168.el9_8.tuxcare.els4.noarch.rpm 0f28ddd6a2f147e869be663c88eb5ccde53d7ad70e81638eb24620b87682f78a rubygems-3.2.33-168.el9_8.tuxcare.els4.noarch.rpm 7f2aae942f017802fd68bc1d8c411368f92f08cc132b706e8c4e122c06a9324d rubygems-devel-3.2.33-168.el9_8.tuxcare.els4.noarch.rpm 246dfec194378c4f41eb74fd6bbaa9a137deae33a0f8388611ab6fe40ea389ce CLSA-2026:1792932527 TuxCare License Agreement 0 - CVE-2026-106555: reset the GSSAPI client state before each authentication attempt - CVE-2026-106553: store delegated GSSAPI credentials only after successful GSSAPI user authorization - CVE-2026-106583: reject '$' and '\' in a user name given on the ssh command line - CVE-2026-106585: reject compressed packets that inflate beyond the maximum packet size - CVE-2026-60001: enforce the minimum per-attempt delay in GSSAPI and keyboard-interactive authentication (vendor patch) - CVE-2026-59998: document the GSSAPIStrictAcceptorCheck caveat (vendor patch) - CVE-2026-59997: fix the internal-sftp server argument parsing limit (vendor patch) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-106555: reset the GSSAPI client state before each authentication attempt - CVE-2026-106553: store delegated GSSAPI credentials only after successful GSSAPI user authorization - CVE-2026-106583: reject '$' and '\' in a user name given on the ssh command line - CVE-2026-106585: reject compressed packets that inflate beyond the maximum packet size - CVE-2026-60001: enforce the minimum per-attempt delay in GSSAPI and keyboard-interactive authentication (vendor patch) - CVE-2026-59998: document the GSSAPIStrictAcceptorCheck caveat (vendor patch) - CVE-2026-59997: fix the internal-sftp server argument parsing limit (vendor patch)

0 tuxcare-almalinux9.8-esu openssh-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm f2ff6fa90a776a6ee3f2c53e7e6f428815e6f1808066a0447ba5fc45551a870e openssh-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm c3045ec41f1bea6f6494e6dece8489c64951425637427deff38b0e1c019c1599 openssh-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm 0245fb4085d38a7bb219b12fa69bd191f30bde53243277961460fd2a09340322 openssh-askpass-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm 31c9d3bfe66e82674068506841f4972296ded4b04e848a78bbace758fc53ef4d openssh-askpass-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm afe387226d69dd0a59a7b453a11e2f5b053a58e83766c153f5e3c981f2a79068 openssh-askpass-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm f0367cf30eddb46c823020af3158840fd32fbdc6441f41c92925f668b006e105 openssh-clients-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm b4e7b6b3c0815e0af3ad0e179d6207d9094f01e2a7bb904cecce35e7c4238894 openssh-clients-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm 601a6ce461a9867a69221169efcc742feed1b8928daebf9c12b1673459397a1c openssh-clients-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm 056fd42ffd7555d6842b1e13ac36bf0ab6eb383da877178f5722e383d2a0f397 openssh-keycat-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm f4fdd42a7874652c6eb497a436d387011ef9a59aa7b294cf9ea47906a7db426e openssh-keycat-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm be14af9c7a1e30a54c5c057bfac3e99c4d7ede39b3c01871bea145c7db496c07 openssh-keycat-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm 5c0df56b85042980f9ac97d6be4ccae6bf608d49a164a203be9a6548a8fc7ac2 openssh-server-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm e12c0c9999335af9e60a1a3e1478435a2c70946717088bf0a318e6b59ef69d42 openssh-server-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm dcdf526efd4287a6abfefc1a3de2d11ccbde70517f0526dceeb8de45de694387 openssh-server-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm d744fb30f6455edbaf93b82f6d9af8425445f559f309fb3586e23dcc23b638e2 openssh-sk-dummy-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm 5b22506d13f493ef4668520ce6b364eea7c3ac1908b108387e8ab6531a762756 openssh-sk-dummy-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm 53367e836587328517718915fe21d2d4b70e1719892a8cfeed5f4fb3129a8eaf openssh-sk-dummy-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm e90435bc679a309a1124720155f88325e577fa61f7fa633833ee8d40a55fc8e7 pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.tuxcare.els2.aarch64.rpm 4e82a4e2dbe696e0844a43e06c6576becb8ee23c7e1edd11aa86802de554be53 pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.tuxcare.els2.i686.rpm 6b61399bfa6032162b5cc6cafa834c2be7ab46ae67bf63d0485553bf32c337de pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.tuxcare.els2.x86_64.rpm 0a12b0956b2c020541da5c04baad5ce02013a1ac0854d72155341c818a594c67