Tuxcare Errata System 0.0.1 5.10 2026-05-16T17:30:31 TuxCare 9.6 - CVE-2025-32990: fix memory corruption in when parsing a template file Important TuxCare License Agreement CVE-2025-32990 CVE-2025-32988 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-9230: fix Out-of-bounds read & write in RFC 3211 KEK Unwrap Moderate TuxCare License Agreement CVE-2025-9230 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-54349: fix off-by-one error and heap-based buffer overflow in iperf_auth.c - CVE-2025-54350: prevent crash due to assertion failures on malformed authentication attempt in iperf_auth.c Critical TuxCare License Agreement CVE-2025-54349 CVE-2025-54350 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-1735: fix missing error checking that could result in SQL injection and crashes Important TuxCare License Agreement CVE-2025-1735 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-62168: fix redaction failure to prevent information disclosure in error handling Important TuxCare License Agreement CVE-2025-62168 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-0840: fix stack-based buffer overflow in disassemble_bytes function Important TuxCare License Agreement CVE-2025-0840 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-5372: fix inconsistent return value interpretation in ssh_kdf() function to prevent uninitialized key buffers leading to SSH session compromise - CVE-2025-5987: fix missing error detection in ChaCha20 initialization that could leave cipher context partially uninitialized Important TuxCare License Agreement CVE-2025-5987 CVE-2025-5372 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-31651: fix improper neutralization of escape, meta, or control sequences Critical TuxCare License Agreement CVE-2025-31651 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-32365: prevent out-of-bounds reads in JBIG2Bitmap::combine function in JBIG2Stream.cc Important TuxCare License Agreement CVE-2025-32365 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-8177: fix buffer overflow in tools/thumbnail.c Important TuxCare License Agreement CVE-2025-8177 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-27113: fix NULL pointer dereference in xmlPatMatch in pattern.c Important TuxCare License Agreement CVE-2025-27113 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-7424: fix type confusion in xsltDocumentFunctionLoadDocument Important TuxCare License Agreement CVE-2025-7424 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-1352: fix memory corruption when using -w option with a specially crafted input file - CVE-2025-1365: fix buffer overflow when using the -D and -a options with a specially crafted input file - CVE-2025-1372: fix buffer overflow when using the -z and -x options with a specially crafted input file Important TuxCare License Agreement CVE-2025-1372 CVE-2025-1365 CVE-2025-1352 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-8836: fix manipulation in function jpc_floorlog2 to prevent reachable assertion Important TuxCare License Agreement CVE-2025-8837 CVE-2025-8836 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-64505: fix heap buffer over-read vulnerability in png_do_quantize function Low TuxCare License Agreement CVE-2025-64505 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-47151: fix type confusion vulnerability in the lasso_node_impl_init_from_xml functionality Critical TuxCare License Agreement CVE-2025-47151 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-11230: fix possible DoS in mjson library when parsing numbers Important TuxCare License Agreement CVE-2025-11230 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2023-52356: add col/row validation in TIFFReadRGBAStrip/TIFFReadRGBATile to prevent heap-buffer overflow and potential DoS Important TuxCare License Agreement CVE-2023-52356 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-5351: fix double-free conditions - CVE-2025-8114: fix NULL pointer dereference Moderate TuxCare License Agreement CVE-2025-8114 CVE-2025-5351 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-59375: fix memory amplification and add allocation tracker Moderate TuxCare License Agreement CVE-2025-59375 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-10921: fix HDR file parsing heap-based buffer overflow vulnerability Important TuxCare License Agreement CVE-2025-10921 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Bump release version to 2:1.39.6-1.tuxcare.els3 Important TuxCare License Agreement CVE-2025-58183 CVE-2025-27144 CVE-2025-52881 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal Important TuxCare License Agreement CVE-2025-11561 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-55304: add new method appendIccProfile to fix quadratic performance issue Moderate TuxCare License Agreement CVE-2025-55304 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-52881: container escape and denial of service due to arbitrary write gadgets and procfs write redirects - CVE-2025-58183: fix unbounded allocation when parsing GNU sparse map Important TuxCare License Agreement CVE-2025-52881 CVE-2025-58183 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - rebuild with golang 1.25.3-1 to fix CVE-2025-58183 (fix unbounded memory consumption when reading GNU pax 1.0 sparse files) Important TuxCare License Agreement CVE-2025-58183 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Update to Go 1.25.3 Important TuxCare License Agreement CVE-2025-58183 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-5916: fix signed integer overflow in WARC format reader - CVE-2025-5917: fix buffer overflow in build_ustar_entry for PAX format - CVE-2025-5918: prevent skipping past EOF in archive file reading Moderate TuxCare License Agreement CVE-2025-5918 CVE-2025-5917 CVE-2025-5916 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - rebuild with golang 1.25.3-1 to fix CVE-2025-58183 (fix unbounded memory consumption when reading GNU pax 1.0 sparse files) - fix failing tests for golang 1.25 Important TuxCare License Agreement CVE-2025-58183 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-47906: fix unexpected paths returned from LookPath in os/exec Moderate TuxCare License Agreement CVE-2025-47906 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-13499: fix crash in Kafka dissector Moderate TuxCare License Agreement CVE-2025-13499 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075} - tls: wait for pending async decryptions if tls_strp_msg_hold fails {CVE-2025-40176} - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns {CVE-2025-38499} - rcu: Fix rcu_read_unlock() deadloop due to IRQ work {CVE-2025-39744} - page_pool: Fix use-after-free in page_pool_recycle_in_ring {CVE-2025-38129} - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access {CVE-2025-38704} - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors {CVE-2024-56675} - padata: Fix pd UAF once and for all {CVE-2025-38584} - padata: do not leak refcount in reorder_work {CVE-2025-38031} - Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981} - Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117} - Bluetooth: MGMT: Remove unused mgmt_pending_find_data - Bluetooth: MGMT: set_mesh: update LE scan interval and window - Bluetooth: hci_sync: fix set_local_name race condition {CVE-2025-39797} - xfrm: Duplicate SPI Handling {CVE-2025-39797} - kernfs: Fix UAF in polling when open file is released {CVE-2025-39881} - OPP: add index check to assert to avoid buffer overflow in _read_freq() {CVE-2024-57998} - block: fix uaf for flush rq while iterating tags {CVE-2024-58072} {CVE-2024-53170} - wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072} - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() {CVE-2025-21631} - net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-40954} - Squashfs: sanity check symbolic link size {CVE-2024-46744} - e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898} - wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} - i40e: fix idx validation in config queues msg {CVE-2025-39971} - NFS: Fix a race when updating an existing write {CVE-2025-39697} - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955} - wifi: mt76: fix linked list corruption {CVE-2025-39918} - io_uring/waitid: always prune wait queue entry in io_waitid_wait() {CVE-2025-40047} - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync {CVE-2025-39982} - workqueue: Put the pwq after detaching the rescuer from the pool {CVE-2025-21786} - zram: fix potential UAF of zram table {CVE-2025-21671} - sched: sch_cake: add bounds checks to host bulk flow fairness counts {CVE-2025-21647} - wifi: mt76: mt7925: fix off by one in mt7925_load_clc() {CVE-2024-57990} - blk-cgroup: Fix UAF in blkcg_unpin_online() {CVE-2024-56672} - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() {CVE-2024-54456} - nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - x86/tdx: Fix "in-kernel MMIO" check {CVE-2024-47727} - drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361} - dm-bufio: don't schedule in atomic context {CVE-2025-37928} - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882} - KVM: arm64: Tear down vGIC on failed vCPU creation {CVE-2025-37849} - usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022} - drm/amd/display: Fix out-of-bound accesses {CVE-2025-21985} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - partitions: mac: fix handling of bogus partition table {CVE-2025-21772} - ipmr: do not call mr_mfc_uses_dev() for unres entries {CVE-2025-21719} - net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789} - isofs: Prevent the use of too small fid {CVE-2025-37780} - sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142} - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid {CVE-2025-37927} - tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923} - KVM: x86: Reset IRTE to host control if *new* route isn't postable {CVE-2025-37885} - jbd2: remove wrong sb->s_sequence check {CVE-2025-37839} - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() {CVE-2025-37819} - drm/amd/display: Fix slab-use-after-free on hdcp_work {CVE-2025-21968} - netfilter: nft_tunnel: fix geneve_opt type confusion addition {CVE-2025-22056} - io_uring: prevent opcode speculation {CVE-2025-21863} - geneve: Fix use-after-free in geneve_find_dev(). {CVE-2025-21858} - vrf: use RCU protection in l3mdev_l3_out() {CVE-2025-21791} - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() {CVE-2025-21780} - net: sched: fix ets qdisc OOB Indexing {CVE-2025-21692} Important TuxCare License Agreement CVE-2025-37927 CVE-2024-53216 CVE-2025-37789 CVE-2024-53170 CVE-2024-56672 CVE-2025-21791 CVE-2024-46744 CVE-2025-21786 CVE-2025-21719 CVE-2025-23142 CVE-2025-21647 CVE-2025-39744 CVE-2025-21968 CVE-2025-37885 CVE-2025-39955 CVE-2025-37819 CVE-2025-38075 CVE-2024-56675 CVE-2024-47727 CVE-2024-57998 CVE-2024-58014 CVE-2025-21702 CVE-2025-38129 CVE-2025-21671 CVE-2025-22056 CVE-2025-21780 CVE-2024-57990 CVE-2025-38724 CVE-2025-37839 CVE-2025-21863 CVE-2025-38584 CVE-2025-39898 CVE-2025-39918 CVE-2024-54456 CVE-2025-39881 CVE-2025-39982 CVE-2025-37849 CVE-2025-39981 CVE-2025-37882 CVE-2025-21631 CVE-2025-38704 CVE-2025-38499 CVE-2025-21692 CVE-2025-39971 CVE-2025-21858 CVE-2025-21985 CVE-2025-37923 CVE-2025-22022 CVE-2025-21704 CVE-2025-37780 CVE-2025-39864 CVE-2025-21772 CVE-2025-39697 CVE-2025-40047 CVE-2024-58072 CVE-2025-40176 CVE-2025-38117 CVE-2025-39797 CVE-2025-38361 CVE-2025-37928 CVE-2024-52332 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-54080: fix insufficient bounds checking Moderate TuxCare License Agreement CVE-2025-54080 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-1371: fix null pointer dereference in eu-readelf when processing corrupt ELF files with broken program headers - CVE-2025-1376: fix denial of service in libelf when processing sections without data (elf_strptr on sections with sh_size set but no data) - CVE-2025-1377: fix denial of service in eu-strip when processing relocation tables with invalid symbol table sections (SHT_NOBITS) Moderate TuxCare License Agreement CVE-2025-1376 CVE-2025-1377 CVE-2025-1371 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-11277: modified last commit's patch and .spec file to correctly apply fix Important TuxCare License Agreement CVE-2025-11277 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-32989: fix read buffer overrun in x509 SCT timestamps Moderate TuxCare License Agreement CVE-2025-32989 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Made AMD CPU microcode updates to fix CVE-2024-36350 and CVE-2024-36357 - Update AMD CPU microcode to 20251125 - Addition AMD CPU microcode for processor family 0x1a: cpuid:0x00B00F81(ver:0x0B008121), cpuid:0x00B20F40(ver:0x0B204037), cpuid:0x00B40F40(ver:0x0B404035), cpuid:0x00B40F41(ver:0x0B404108), cpuid:0x00B60F00(ver:0x0B600037), cpuid:0x00B60F80(ver:0x0B608038), cpuid:0x00B70F00(ver:0x0B700037); - Update AMD CPU microcode for processor family 0x1a: cpuid:0x00B00F21(ver:0x0B00215A), cpuid:0x00B10F10(ver:0x0B101054); - Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F11(ver:0x0A0011D5), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215); Moderate TuxCare License Agreement CVE-2024-36357 CVE-2024-36350 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Update to 2.50.3 - Fix multiple security issues that could lead to crashes, memory corruption, or information disclosure when processing malicious web content: - CVE-2025-66287 - CVE-2025-43458 - CVE-2025-43421 - CVE-2025-13947 - Includes fixes previously released in version 2.50.2: - CVE-2025-13502: fix out-of-bounds read and integer underflow - CVE-2025-43443: fix unexpected process crash from malicious web content - CVE-2025-43440: fix DFG constant folding to skip unreachable blocks - CVE-2025-43434: fix use-after-free in WebAssembly globals and tables - CVE-2025-43432: fix use-after-free in WasmFunctionParser - CVE-2025-43431: fix dangling pointer in WebAssembly struct field types - CVE-2025-43430: fix BBQ JIT writing to incorrect stack slots - CVE-2025-43429: fix insufficient bounds checking in Unicode string handling - CVE-2025-43427: fix wrong jump table state handling that could lead to crashes - CVE-2025-43425: fix DFG node cloning flaw leading to crashes - CVE-2025-43392: fix cross-origin image data leak Important TuxCare License Agreement CVE-2025-43434 CVE-2025-43392 CVE-2025-43425 CVE-2023-43000 CVE-2025-13502 CVE-2025-43429 CVE-2025-43431 CVE-2025-43427 CVE-2025-43440 CVE-2025-43430 CVE-2025-13947 CVE-2025-66287 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-11083: prevent linker crash on corrupt section header Important TuxCare License Agreement CVE-2025-11083 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-26625: prevent git lfs checkout and git lfs pull write outside repo Important TuxCare License Agreement CVE-2025-26625 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-10921: fix vulnerability by updating gegl04 dependency requirement to gegl04 >= 0.4.34-2.el9.tuxcare.els1 Important TuxCare License Agreement CVE-2025-10934 CVE-2025-10921 CVE-2025-10922 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-58098: prevent SSI args from being passed to CGI scripts Important TuxCare License Agreement CVE-2025-58098 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-0167: fix password leaking when the netrc file has a default entry that omits both login and password Low TuxCare License Agreement CVE-2025-0167 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Update to 2.50.4 to fix the following vulnerabilities: - CVE-2025-14174: fix memory corruption via improved validation of web content - CVE-2025-43501: fix buffer overflow with improved memory handling to prevent process crashes - CVE-2025-43529: fix use-after-free in memory management to prevent arbitrary code execution - CVE-2025-43531: fix race condition via improved state handling to prevent process crashes - CVE-2025-43535: fix unexpected process crash through improved memory handling - CVE-2025-43536: fix use-after-free with improved memory management for web content processing - CVE-2025-43541: fix type confusion via improved state handling to prevent unexpected crashes Important TuxCare License Agreement CVE-2025-43541 CVE-2025-43501 CVE-2025-43535 CVE-2025-43529 CVE-2025-43536 CVE-2025-43531 CVE-2025-14174 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-55752: fix path traversal vulnerability in URL normalization and improve QSA/QSD rewrite handling Important TuxCare License Agreement CVE-2025-55752 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-9714: fix XPath depth check to work with recursive invocations Moderate TuxCare License Agreement CVE-2025-9714 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Bump version Important TuxCare License Agreement CVE-2023-4735 CVE-2023-4751 CVE-2023-5344 CVE-2023-4781 CVE-2023-4752 CVE-2023-2610 CVE-2024-22667 CVE-2023-0054 CVE-2023-5535 CVE-2025-29768 CVE-2025-53905 CVE-2021-3903 CVE-2023-4734 CVE-2023-4750 CVE-2023-4733 CVE-2023-0433 CVE-2023-0288 CVE-2023-0049 CVE-2025-53906 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2024-9681: improve HSTS subdomain handling to prevent incorrectly overriding parent domain entries Moderate TuxCare License Agreement CVE-2024-9681 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-55753: fix integer overflow in ACME backoff timer - Fix test failure on i686 for boolean refcount assertion Important TuxCare License Agreement CVE-2025-55753 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-22134: correctly reset the visual mode before opening other windows and buffers - CVE-2025-24014: skip the redraw attempt that accesses an unallocated variable Moderate TuxCare License Agreement CVE-2025-22134 CVE-2025-24014 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-61984: fix username handling by rejecting control characters from untrusted sources to prevent ProxyCommand code execution - CVE-2025-61985: disallowed NUL characters in ssh:// URI parsing to prevent ProxyCommand-based code execution Moderate TuxCare License Agreement CVE-2025-61984 CVE-2025-61985 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-14178: fix integer overflow in the precomputation of element counts using zend_hash_num_elements() Important TuxCare License Agreement CVE-2025-14178 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-24294: Limit the length of a decompressed domain name to prevent DoS in resolv gem Moderate TuxCare License Agreement CVE-2025-61594 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-27221: fix credential leak by correctly truncating userinfo Moderate TuxCare License Agreement CVE-2025-27221 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-65018: fixed buffer overflow vulnerability in png_image_finish_read function Important TuxCare License Agreement CVE-2025-65018 CVE-2025-64720 CVE-2025-66293 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-1220 CVE-2025-6491 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - use 8.0.44-1 update for tuxcare 9.6 Moderate TuxCare License Agreement CVE-2025-53069 CVE-2025-53042 CVE-2025-53044 CVE-2025-53062 CVE-2025-53040 CVE-2025-53054 CVE-2025-53045 CVE-2025-53053 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-13836: fixed memory exhaustion vulnerability when reading HTTP responses with malicious Content-Length headers Critical TuxCare License Agreement CVE-2025-13836 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-14523: reject duplicate Host headers Important TuxCare License Agreement CVE-2025-14523 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-64524: fix heap buffer overflow and memory corruption via an unvalidated length parameter in CompressData function of the rastertopclx filter Moderate TuxCare License Agreement CVE-2025-64524 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-58436: fix unresponsive cupsd process caused by a slow client Moderate TuxCare License Agreement CVE-2025-58436 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Update to 13.23 - CVE-2025-12818: fix integer overflow in allocation-size calculations Important TuxCare License Agreement CVE-2025-12818 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-31651: fix improper neutralization of escape, meta, or control sequences - CVE-2025-55752: fix relative path traversal vulnerability Critical TuxCare License Agreement CVE-2025-55752 CVE-2025-31651 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-61594: fix incomplete fix for CVE-2025-27221 which allowed credential leaks to persist in URI#+ - fully redact x-oauth-basic tokens from tests - update URI specs to reflect that modifying user or host clears credentials Moderate TuxCare License Agreement CVE-2025-24294 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Backport CVE fixes - Bump version to solve conflict with community package Moderate TuxCare License Agreement CVE-2025-6395 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Update to 13.23 - CVE-2025-12818: fix integer overflow in allocation-size calculations Important TuxCare License Agreement CVE-2025-12818 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-12084: fix denial-of-service by removing quadratic behavior in xml.dom.minidom node ID cache clearing when building deeply nested documents Moderate TuxCare License Agreement CVE-2025-12084 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-47913: fix ssh/agent client panic on unexpected message types Important TuxCare License Agreement CVE-2025-47913 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-12084: fix denial-of-service by removing quadratic behavior in xml.dom.minidom node ID cache clearing when building deeply nested documents Moderate TuxCare License Agreement CVE-2025-12084 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-13699: fix directory traversal in mariadb-dump --tab by safely converting table and view names when generating output file paths Important TuxCare License Agreement CVE-2025-13699 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-68973: fix possible memory corruption in the armor parser Important TuxCare License Agreement CVE-2025-68973 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-65082: fix CGI environment variable injection by preventing HTTP headers from overriding server-set variables and added regression tests - CVE-2025-66200: prevent suexec bypass by removing request notes usage and rejecting the undocumented RequestHeader note option Moderate TuxCare License Agreement CVE-2025-65082 CVE-2025-66200 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-67268: fix heap-based buffer overrun in NMEA2000 GNSS satellite handling - CVE-2025-67269: fix integer underflow in NAVCOM packet parsing to prevent excessive payload length and CPU-exhaustion Important TuxCare License Agreement CVE-2025-67268 CVE-2025-67269 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-45582: fixed path traversal vulnerability using malicious archive extraction Moderate TuxCare License Agreement CVE-2025-45582 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-61915: fix out-of-bound write issue caused by inserting malicious line in cups web UI config Moderate TuxCare License Agreement CVE-2025-61915 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-68615: fix buffer overflow vulnerability in net-snmp snmptrapd daemon Critical TuxCare License Agreement CVE-2025-68615 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-61729: limit number of hosts printed in HostnameError.Error() and optimize error string construction to prevent quadratic runtime Important TuxCare License Agreement CVE-2025-61729 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-13601: fix incorrect buffer size calculation in g_escape_uri_string - add fuzz tests for g_filename_{to,from}_uri() Important TuxCare License Agreement CVE-2025-13601 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-66471: fix improper handling of highly compressed data in the Streaming API Important TuxCare License Agreement CVE-2026-21441 CVE-2025-66418 CVE-2025-66471 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Update to jdk-17.0.18+8 (GA) - CVE-2026-21925: improve JMX connections - CVE-2026-21933: improve HttpServer Request handling - CVE-2026-21945: enhance Certificate Checking - CVE-2025-64720: libpng: fix buffer overflow - CVE-2025-65018: libpng: fix heap buffer overflow Important TuxCare License Agreement CVE-2026-21933 CVE-2025-64720 CVE-2025-65018 CVE-2026-21925 CVE-2026-21945 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-21945: security component vulnerability allowing unauthenticated attackers with network access to cause denial of service - CVE-2026-21933: networking component vulnerability allowing unauthenticated attackers with network access to compromise confidentiality and integrity - CVE-2026-21925: RMI component vulnerability allowing unauthenticated attackers with network access to compromise confidentiality and integrity - CVE-2025-65018: heap buffer overflow in libpng png_combine_row triggered via png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output - CVE-2025-64720: out-of-bounds read in libpng png_image_read_composite when processing palette PNG images with PNG_FLAG_OPTIMIZE_ALPHA enabled Important TuxCare License Agreement CVE-2026-21933 CVE-2025-65018 CVE-2026-21945 CVE-2025-64720 CVE-2026-21925 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-23166: fix SignTraits::DeriveBits() to properly validate user-supplied inputs to prevent crashing Node.js process Important TuxCare License Agreement CVE-2025-23166 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2023-38552: prevent application from intercepting integrity check operation and returning forged checksum Important TuxCare License Agreement CVE-2023-38552 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-14425: fix JP2 image loader buffer overflow by validating pixel buffer size calculation to prevent potential remote code execution - CVE-2025-14422: fix parsing of PNM files to prevent integer overflow leading to remote code execution Important TuxCare License Agreement CVE-2025-14422 CVE-2025-14425 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-9086: cookie: don't treat the leading slash as trailing Moderate TuxCare License Agreement CVE-2025-9086 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-24515: fix NULL pointer dereference in XML_ExternalEntityParserCreate Critical TuxCare License Agreement CVE-2026-24515 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-69418: fix OCB AES-NI/HW stream path leaving trailing bytes unauthenticated/unencrypted by advancing pointers after stream processing - CVE-2025-69420: fix missing ASN1_TYPE validation in TS_RESP_verify_response for signing certificate attributes - CVE-2025-15468: add a NULL guard before dereferencing SSL_CIPHER to prevent abnormal termination of the running process causing Denial of Service Critical TuxCare License Agreement CVE-2026-22796 CVE-2026-22795 CVE-2025-69419 CVE-2025-69421 CVE-2025-15468 CVE-2025-68160 CVE-2025-69418 CVE-2025-69420 CVE-2025-15467 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2024-28863: prevent extraction in excessively deep sub-folders to fix potential memory consumption and crashing issues. Moderate TuxCare License Agreement CVE-2024-28863 CVE-2025-23085 CVE-2023-46809 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-6176: fix excessive resource consumption during brotli decompression Important TuxCare License Agreement CVE-2025-6176 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-21637: fix a flaw in TLS error handling where exceptions in handshake callbacks can cause process crashes or file descriptor leaks Important TuxCare License Agreement CVE-2026-21637 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-22801: fix heap buffer over-read in png_image_write_* Important TuxCare License Agreement CVE-2026-22801 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-69204: fix integer overflow in WriteSVGImage Important TuxCare License Agreement CVE-2025-69204 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495} - fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269} - Bluetooth: ISO: Fix possible UAF on iso_conn_free {CVE-2025-40141} - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once {CVE-2025-40318} - smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728} - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} - bus: mhi: host: Detect events pointing to unexpected TREs {CVE-2025-39790} - nvmet: fix out-of-bounds access in nvmet_enable_port {CVE-2025-37825} - drm/xe: Make dma-fences compliant with the safe access rules {CVE-2025-38703} - libceph: fix invalid accesses to ceph_connection_v1_info {CVE-2025-39880} - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass {CVE-2025-38396} - anon_inode: explicitly block ->setattr() - anon_inode: use a proper mode internally - dynamic_dname(): drop unused dentry argument - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete {CVE-2025-38118} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync {CVE-2024-58013} - drm/xe: Fix vm_bind_ioctl double free bug {CVE-2025-38731} - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680} - HID: core: ensure __hid_request reserves the report ID as the first byte - wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891} - i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853} - usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760} - fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691} - drm/i915: Protect access to driver and timeline name - sync_file: Protect access to driver and timeline name - dma-fence: Add safe access helpers and document the rules - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102} - net: phylink: add lock for serializing concurrent pl->phydev writes with resolver {CVE-2025-39905} - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() {CVE-2025-39806} - vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883} - md/raid1: Fix stack memory use after return in raid1_reshape {CVE-2025-38445} - drm/i915/gt: Fix timeline left held on VMA alloc error {CVE-2025-38389} - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249} - i40e: remove read access to debugfs files {CVE-2025-39901} - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863} - bnxt_en: Fix memory corruption when FW resources change during ifdown {CVE-2025-39810} - atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459} - nbd: fix uaf in nbd_genl_connect() error path {CVE-2025-38443} - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods {CVE-2025-38395} - virtio-net: ensure the received length does not exceed allocated size {CVE-2025-38375} - ftrace: Fix UAF when lookup kallsym after ftrace disabled {CVE-2025-38346} - sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240} - net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180} - software node: Correct a OOB check in software_node_get_reference_args() {CVE-2025-38342} - net: atm: add lec_mutex {CVE-2025-38323} - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320} - bpf: Avoid __bpf_prog_ret0_warn when jit fails {CVE-2025-38280} - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245} - can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004} - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} - exfat: fix double free in delayed_free {CVE-2025-38206} - fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198} - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} - net: openvswitch: Fix the dead loop of MPLS parse {CVE-2025-38146} - net/mdiobus: Fix potential out-of-bounds read/write access {CVE-2025-38111} - net_sched: red: fix a race in __red_change() {CVE-2025-38108} - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103} - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() {CVE-2025-38077} - crypto: lzo - Fix compression buffer overrun {CVE-2025-38068} - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024} - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request {CVE-2025-38013} - i40e: add validation for ring_len param {CVE-2025-39973} - libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277} - net: atlantic: fix fragment overflow handling in RX path {CVE-2025-68301} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154} - eventpoll: don't decrement ep refcount while still holding the ep mutex {CVE-2025-38349} - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind {CVE-2025-68305} - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() {CVE-2025-40294} - mptcp: fix race condition in mptcp_schedule_work() {CVE-2025-40258} - vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248} - dm: fix dm_blk_report_zones {CVE-2025-38141} - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy {CVE-2025-40251} - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing {CVE-2025-38568} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022} Important TuxCare License Agreement CVE-2025-38375 CVE-2025-38445 CVE-2025-38349 CVE-2025-38395 CVE-2025-38249 CVE-2025-38574 CVE-2025-38180 CVE-2025-39810 CVE-2025-39973 CVE-2025-38495 CVE-2025-39905 CVE-2025-38051 CVE-2025-38212 CVE-2025-38618 CVE-2025-38245 CVE-2025-38403 CVE-2025-38389 CVE-2025-38443 CVE-2025-38108 CVE-2025-38157 CVE-2025-38323 CVE-2025-38415 CVE-2025-38346 CVE-2025-40240 CVE-2025-38024 CVE-2025-38280 CVE-2025-38004 CVE-2025-68305 CVE-2025-38118 CVE-2025-38680 CVE-2025-38077 CVE-2025-38206 CVE-2025-40294 CVE-2025-38572 CVE-2025-38103 CVE-2025-38198 CVE-2025-38459 CVE-2025-38342 CVE-2025-39863 CVE-2025-38396 CVE-2025-38102 CVE-2025-38068 CVE-2025-38146 CVE-2025-40251 CVE-2025-37825 CVE-2025-38702 CVE-2025-68301 CVE-2025-40248 CVE-2025-38568 CVE-2025-38022 CVE-2025-39891 CVE-2025-39691 CVE-2025-40269 CVE-2025-40141 CVE-2025-40318 CVE-2025-39911 CVE-2025-39880 CVE-2025-39790 CVE-2025-39806 CVE-2025-39901 CVE-2025-38728 CVE-2024-58013 CVE-2025-39883 CVE-2025-38320 CVE-2025-38111 CVE-2025-40154 CVE-2025-38013 CVE-2025-39760 CVE-2025-38703 CVE-2025-40277 CVE-2025-68285 CVE-2025-39853 CVE-2025-38141 CVE-2025-38731 CVE-2025-40258 CVE-2025-40271 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Update to jdk-21.0.10+7 - CVE-2026-21945: fix possible DOS - CVE-2025-65018: fix libpng heap buffer overflow in png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format - CVE-2025-64720: fix libpng out-of-bounds read in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled Important TuxCare License Agreement CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 CVE-2025-65018 CVE-2025-64720 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2024-22020: lib,esm: handle bypass network-import via data Moderate TuxCare License Agreement CVE-2024-22020 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-68618: added recursion depth check in MSL and SVG coders - Check that image exists before we destroy it Important TuxCare License Agreement CVE-2025-68618 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-15079: fix accepting hosts not present in the specified known_hosts during SSH-based SCP/SFTP transfers when global known_hosts contained them restrict host verification to the specified known_hosts file Low TuxCare License Agreement CVE-2025-15079 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-61662: fix use-after-free in gettext/gettext due to unregistered gettext command on module unload Important TuxCare License Agreement CVE-2025-61662 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-14087: fix heap corruption in GLib GVariant parser by preventing integer overflows and unsafe buffer size calculations - CVE-2025-14512: fix integer overflow in escape_byte_string() for byte strings with many invalid characters Critical TuxCare License Agreement CVE-2025-14512 CVE-2025-14087 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-1761: fix memory corruption when parsing multipart HTTP responses - CVE-2026-0719: fix integer overflow in NTLM authentication when processing excessively long passwords - added upstream tests for CVE-2024-52531, CVE-2025-32914, CVE-2025-4948 - merged CVE-2025-2784 and CVE-2025-32053 - modified added tests for CVE-2025-46421 as it used 3.x version API - skip connection-test Important TuxCare License Agreement CVE-2026-1761 CVE-2026-0719 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-14524: fix OAuth2 bearer token leak on cross-protocol redirect - CVE-2025-15224: fix libssh public-key auth fallback to SSH agent Low TuxCare License Agreement CVE-2025-15224 CVE-2025-14524 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-25646: fix out-of-bounds read and potential heap buffer overflow in png_set_quantize() caused by stale palette indices during color pruning Important TuxCare License Agreement CVE-2026-25646 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm Important TuxCare License Agreement CVE-2025-61728 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-68950: fix DOS due to circular references between two MVGs, leading to a stack overflow Moderate TuxCare License Agreement CVE-2025-68950 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-15059: fix PSP file loader to validate channel types for grayscale images, preventing invalid memory access from incorrect offset computation Important TuxCare License Agreement CVE-2025-15059 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-0915: prevent leak of stack contents to configured DNS resolver when getnetbyaddr or getnetbyaddr_r query a zero-valued network with DNS backend in nsswitch.conf; sanitize stack buffers and add input validation; eliminate exposure of uninitialized data Moderate TuxCare License Agreement CVE-2026-0915 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Update to Go 1.25.7 - CVE-2025-61726: fixed DoS due to memory exhaustion flaw in net/url parameter parsing - CVE-2025-61732: fixed RCE via code smuggling flaw in cgo comment parsing - CVE-2025-68121: fixed security bypass in TLS where session resumption could ignore revoked or expired client certificates. - CVE-2025-61731: fixed arbitrary code execution vulnerability in the go command toolchain involving unsafe cgo configuration flags. - CVE-2025-68119: fixed arbitrary code execution risk when the go tool processes malicious version strings from external source control. - CVE-2025-61730: fixed minor information disclosure in TLS 1.3 during specific encrypted handshake message transitions. - CVE-2025-61727: fixed certificate validation bypass where specific wildcard domain constraints were not properly enforced by the security library. Important TuxCare License Agreement CVE-2025-61731 CVE-2025-61730 CVE-2025-61727 CVE-2025-61732 CVE-2025-68119 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-23167: fix improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. - CVE-2025-59466: fix uncatchable stack overflow exceptions when async_hooks are enabled, preventing denial-of-service crashes in applications using AsyncLocalStorage or async_hooks.createHook(). - CVE-2025-59465: add TLSSocket default error handler to prevent server crash from unhandled ECONNRESET when a malformed HTTP/2 HEADERS frame with invalid HPACK data abruptly destroys a TLS connection during initialization. - CVE-2025-55131: refactor unsafe buffer creation to remove zero-fill toggle, preventing exposure of uninitialized memory when buffer allocations are interrupted via the vm module timeout option. Important TuxCare License Agreement CVE-2025-23167 CVE-2025-59465 CVE-2025-55131 CVE-2025-59466 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-15281: fix wordexp with WRDE_REUSE and WRDE_APPEND returning uninitialized pointers in we_wordv by resetting we_wordc after wordfree Moderate TuxCare License Agreement CVE-2025-15281 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - rebuild with golang 1.25.7 which fixes the following CVEs - - CVE-2025-61726: fix DoS due to memory exhaustion flaw in net/url parameter parsing - CVE-2025-61728: fix DoS due to CPU exhaustion flaw in archive/zip indexing - CVE-2025-61729: fix DoS due to CPU exhaustion flaw in crypto/x509 certificate validation Important TuxCare License Agreement CVE-2025-61729 CVE-2025-61728 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Rebuild against recent Go compiler - CVE-2025-61726: fix net/url excessive memory consumption when parsing large forms with many unique query parameters - CVE-2025-61729: fix crypto/x509 certificate verification allowing excessive resource consumption via HostnameError.Error() - CVE-2025-68121: fix crypto/tls session resumption succeeding when it should fail due to mutated ClientCAs or RootCAs between handshakes Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-25646: fix heap buffer overflow in png_set_quantize caused by stale palette indices in the color distance hash table Important TuxCare License Agreement CVE-2026-25646 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-0994: recursion depth bypass in json_format.ParseDict Important TuxCare License Agreement CVE-2026-0994 CVE-2024-7254 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-68121: rebuild with golang 1.25.7 to fix resumption of session in crypto/tls with ClientCAs or RootCAs fields mutated after initial handshake Critical TuxCare License Agreement CVE-2025-68121 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-0861: fix alignment overflow in memalign/posix_memalign/aligned_alloc that could lead to heap corruption Important TuxCare License Agreement CVE-2026-0861 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - rebuild with newer golang version 1.25.7-1.el9_6.tuxcare.els1 to fix the following CVEs - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61728 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-9230: fix out-of-bounds read & write in RFC 3211 KEK Unwrap in openssl bundled package Moderate TuxCare License Agreement CVE-2025-9230 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-25506: fix buffer overflow in message parsing and add bounds checks and input validation for address length; prevent leak of cryptographic MAC subkey and forging of arbitrary credentials Important TuxCare License Agreement CVE-2026-25506 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - rebuilt with golang >= 1.25.7-1.tuxcare.els1 to address the following security issues: - CVE-2025-61729 Important TuxCare License Agreement CVE-2025-61729 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-14905: fix heap buffer overflow in schema_attr_enum_callback allows Remote Code Execution and Denial of Service Important TuxCare License Agreement CVE-2025-14905 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - rebuild with newer golang version 1.25.7-1.el9_6.tuxcare.els1 to fix the following CVEs - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-22150: fix issue where undici used Math.random() to choose boundary for multipart/form-data request, now uses secure random number generator - CVE-2023-39333: fix maliciously crafted export names injection of JavaScript code - Run full Node.js tests in %check - Fix comment typo in spec Moderate TuxCare License Agreement CVE-2023-39333 CVE-2025-22150 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - rebuild with newer golang version 1.25.7-1.el9_6.tuxcare.els1 to fix the following CVEs - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - rebuild with newer golang version 1.25.7-1.el9_6.tuxcare.els1 to fix the following CVEs - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-26269: fix buffer overflow in netbeans interface Important TuxCare License Agreement CVE-2026-26269 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-57812: fix out-of-bounds read/write when processing crafted TIFF images; validate bytes-per-pixel and use correct pixel buffer size, preventing memory access outside the buffer. Low TuxCare License Agreement CVE-2025-64503 CVE-2025-57812 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-61145: fix double free in tiffcrop; add pointer validation and guard against second free. Important TuxCare License Agreement CVE-2025-61145 CVE-2025-61144 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-21721: Fix dashboard permissions API; verify target dashboard scope and prevent users with permission-management rights on one dashboard from reading or modifying permissions on other dashboards Important TuxCare License Agreement CVE-2026-21721 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - fix: dm: fix dm_blk_report_zones {CVE-2025-38141} - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() {CVE-2025-38664} - qed: Don't collect too many protection override GRC elements {CVE-2025-39949} - drm/amd/display: Avoid a NULL pointer dereference {CVE-2025-39693} - iommu/amd/pgtbl: Fix possible race while increase page table level {CVE-2025-39961} - pNFS: Fix uninited ptr deref in block/scsi layout {CVE-2025-38691} - netfilter: nf_reject: don't leak dst refcount for loopback packets {CVE-2025-38732} - net/mlx5: Check device memory pointer before usage {CVE-2025-38645} - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085} - ice: fix Tx scheduler error handling in XDP callback {CVE-2025-38127} - tracing: Limit access to parser->buffer when trace_get_user failed {CVE-2025-39683} - rcu: Protect ->defer_qs_iw_pending from data race {CVE-2025-39749} - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201} - KVM: x86: use array_index_nospec with indices that come from guest {CVE-2025-39823} - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode {CVE-2025-38535} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec {CVE-2026-22998} - HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824} - svcrdma: use rc_pageoff for memcpy byte offset {CVE-2025-68811} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945} - scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels {CVE-2025-38288} - fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866} - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. {CVE-2025-39913} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit {CVE-2025-39766} - ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689} - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} Important TuxCare License Agreement CVE-2025-39689 CVE-2025-39749 CVE-2025-39823 CVE-2025-38691 CVE-2025-40304 CVE-2025-39866 CVE-2025-39693 CVE-2025-71085 CVE-2025-38288 CVE-2026-22998 CVE-2025-38535 CVE-2025-38127 CVE-2025-38201 CVE-2025-39683 CVE-2025-38645 CVE-2025-38664 CVE-2025-39824 CVE-2025-39913 CVE-2025-39945 CVE-2025-38494 CVE-2025-68811 CVE-2025-38732 CVE-2025-39949 CVE-2025-38685 CVE-2025-68349 CVE-2025-39961 CVE-2025-39766 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Update to MySQL 8.0.45 (January 2026 CPU) CVE-2026-21968 CVE-2026-21936 CVE-2026-21937 CVE-2026-21941 CVE-2026-21948 CVE-2026-21964 CVE-2025-9230 Moderate TuxCare License Agreement CVE-2026-21937 CVE-2026-21941 CVE-2026-21948 CVE-2026-21936 CVE-2026-21964 CVE-2026-21968 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-61143: fix OOB in tiffdither and fix null pointer dereference in tiffcrop Moderate TuxCare License Agreement CVE-2025-61143 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-24401: fix uncontrolled recursion in lookup_handle_cname caused by recursive CNAMEs Moderate TuxCare License Agreement CVE-2026-24401 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Rebuild with Go 1.25.7 to fix Go standard library CVEs - CVE-2025-68121: fix TLS session resumption accepting revoked/expired certificates - CVE-2025-61726: fix DoS via excessive memory consumption in net/url query parsing Critical TuxCare License Agreement CVE-2025-68121 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-61726: fix denial of service due to excessive memory consumption when parsing a large form - version update to 1.25.6 Important TuxCare License Agreement CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Rebuild with golang Go 1.25.7-1.el9_6.tuxcare.els1 to fix CVE-2025-68121 - CVE-2025-68121: fix crypto/tls session resumption succeeding when it should fail due to mutated ClientCAs or RootCAs between handshakes Critical TuxCare License Agreement CVE-2025-68121 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-12801: fix rpc.mountd privilege escalation allowing NFSv3 clients to bypass root_squash and all_squash when mounting subdirectories Moderate TuxCare License Agreement CVE-2025-12801 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-1642: fix upstream TLS MITM ability to inject plaintext into proxied responses; enforce stricter TLS verification and integrity checks Moderate TuxCare License Agreement CVE-2026-1642 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Rebuild with golang 1.25.7-1.el9_6.tuxcare.els1 to fix CVE-2025-61729 - CVE-2025-61729: limit number of hosts printed in HostnameError.Error() and optimize error string construction to prevent quadratic runtime Important TuxCare License Agreement CVE-2025-61729 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-2005: fix heap buffer overflow in ciphertext provider handling that allowed provider-supplied data to execute arbitrary code as the OS user; implement strict bounds checks and buffer-length validation and prevent overflow Important TuxCare License Agreement CVE-2026-2004 CVE-2026-2005 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - rebuild with newer golang version 1.25.7-1.el9_6.tuxcare.els1 to fix the following CVEs - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61728 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-6075: fix quadratic complexity in os.path.expandvars() Moderate TuxCare License Agreement CVE-2025-6075 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-6075: fix quadratic complexity in os.path.expandvars() Moderate TuxCare License Agreement CVE-2025-6075 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-2044: fix uninitialized memory read in PGM file parser - CVE-2026-2045: fix heap buffer overflow in XWD file loader - CVE-2026-2048: fix out-of-bounds write in XWD file loader - CVE-2026-0797: fix missing fread return value checks in ICO file loader Important TuxCare License Agreement CVE-2026-0797 CVE-2026-2044 CVE-2026-2045 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-69649: null pointer dereference in readelf display_relocations() Important TuxCare License Agreement CVE-2025-69649 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-27622: fix integer overflow in CompositeDeepScanLine leading to heap buffer overflow Important TuxCare License Agreement CVE-2026-27622 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-2447: Fix heap buffer overflow in write_superframe_index() Important TuxCare License Agreement CVE-2026-2447 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Fix CVE-2026-25210: integer overflow in doContent tag buffer reallocation Important TuxCare License Agreement CVE-2026-25210 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - Fix CVE-2026-3731: out-of-bounds read in SFTP extension name handler Important TuxCare License Agreement CVE-2026-3731 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-3783: prevent bearer token leak on HTTP(S) redirect when .netrc contains entries for the redirected host Moderate TuxCare License Agreement CVE-2026-3805 CVE-2026-3783 CVE-2026-3784 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-69419: Fix heap buffer overflow in PKCS#12 Unicode to UTF-8 conversion Important TuxCare License Agreement CVE-2025-69419 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-2006: fix missing validation of multibyte character length in text manipulation; add proper length checks and bounds validation; prevent crafted queries from triggering buffer overrun and enabling arbitrary code execution Important TuxCare License Agreement CVE-2026-2006 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-0865: reject control characters in wsgiref headers - CVE-2025-15366: reject control characters in IMAP commands - CVE-2025-15367: reject control characters in POP3 commands - CVE-2026-1299: verify headers are sound in email BytesGenerator Important TuxCare License Agreement CVE-2025-15366 CVE-2025-15367 CVE-2026-1299 CVE-2026-0865 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-2003: fix improper validation of oidvector and prevent disclosure of a few bytes of server memory Moderate TuxCare License Agreement CVE-2026-2003 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-66614: add protocol host name and SNI host name matching Critical TuxCare License Agreement CVE-2025-66614 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-25884: fix out-of-bounds read in CRW image parser - CVE-2026-27596: fix integer underflow in preview component Important TuxCare License Agreement CVE-2026-25884 CVE-2026-27596 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-28417: fix OS command injection via shell metacharacters in netrw URI hostname and port - CVE-2026-28421: fix heap-buffer-overflow and SEGV in swap file recovery due to unvalidated pointer block fields Important TuxCare License Agreement CVE-2026-28417 CVE-2026-28421 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-68114: fix stack buffer underflow/overflow in SStream_concat() Critical TuxCare License Agreement CVE-2025-68114 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-28420: fix heap-buffer-overflow in :terminal when processing Unicode combining characters from supplementary planes - CVE-2026-28418: fix OOB read in Emacs tags parsing with overlong tag file - CVE-2026-28419: fix heap-buffer-underflow in Emacs tags parsing when delimiter appears at start of line Moderate TuxCare License Agreement CVE-2026-28419 CVE-2026-28418 CVE-2026-28420 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2025-67873: fix heap buffer overflow in cs_insn.bytes Important TuxCare License Agreement CVE-2025-67873 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-4111: Fix infinite loop in RAR5 decompression caused by block_length exceeding half the window size, leading to CPU-consuming denial-of-service Important TuxCare License Agreement CVE-2026-4111 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-24734: fix improper input validation vulnerability Important TuxCare License Agreement CVE-2026-24734 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-0865: reject control characters in wsgiref.headers.Headers - CVE-2025-15366: reject control characters in IMAP commands - CVE-2025-15367: reject control characters in POP3 commands - CVE-2026-1299: verify headers are sound in email BytesGenerator Important TuxCare License Agreement CVE-2025-15366 CVE-2025-15367 CVE-2026-1299 CVE-2026-0865 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-25749: fix buffer overflow in 'helpfile' option handling in get_tagfname() Important TuxCare License Agreement CVE-2026-25749 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-32778: fix NULL pointer dereference in setContext on retry after earlier out-of-memory Moderate TuxCare License Agreement CVE-2026-32777 CVE-2026-32776 CVE-2026-32778 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-24733: limit HTTP/0.9 requests to GET method only Low TuxCare License Agreement CVE-2026-24733 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-25679: fix insufficient validation of host/authority in url.Parse that allowed invalid URLs; strengthen parsing and reject malformed host and authority components - fix-smtp-test-expired-cert: fix expired TLS test certificate in net/smtp tests; replace with upstream long-lived cert Important TuxCare License Agreement CVE-2026-25679 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2026-28494: fix stack buffer overflow in morphology kernel parsing - CVE-2026-28691: fix uninitialized pointer dereference in JBIG decoder - CVE-2026-25989: fix off-by-one boundary check in CastDouble functions - CVE-2026-25985: fix memory allocation without limits in SVG decoder - CVE-2026-24485: fix infinite loop in PCD decoder - CVE-2025-66628: fix integer overflow in TIM decoder on 32-bit systems - CVE-2026-28693: fix integer overflow in DIB/BMP coder Important TuxCare License Agreement CVE-2026-24485 CVE-2026-28691 CVE-2026-25985 CVE-2025-66628 CVE-2026-28494 CVE-2026-25989 CVE-2026-28693 cpe:/o:almalinux:almalinux:9::baseos TuxCare 9.6 - CVE-2023-6175: fix heap buffer overflow in NetScreen file parser - CVE-2024-0208: fix crash in GVCP dissector due to NULL string - CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors - CVE-2024-0211: fix infinite loop in DOCSIS dissector - CVE-2024-2955: fix use-after-free in T.38 dissector - CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector - CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors - CVE-2024-11596: fix buffer overflow in ECMP dissector - CVE-2024-24476: fix heap buffer overflow in address resolution - CVE-2024-24478: fix integer overflow in BGP dissector - CVE-2025-5601: fix crash in column prepend fence handling Important TuxCare License Agreement CVE-2024-0208 CVE-2024-0209 CVE-2023-6175 CVE-2024-11596 CVE-2024-24476 CVE-2024-2955 CVE-2024-8250 CVE-2024-9781 CVE-2024-24478 CVE-2025-5601 CVE-2024-0211 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-59362: fix mishandling of ASN.1 encoding of long SNMP OIDs in lib/snmplib/asn1.c (asn_build_objid) Moderate TuxCare License Agreement CVE-2025-59362 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-30258: fix verification DoS due to a malicious subkey in the keyring Moderate TuxCare License Agreement CVE-2025-30258 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-2761: fix out-of-bounds write in FLI plug-in (ZDI-CAN-25100) Important TuxCare License Agreement CVE-2025-2761 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-33515: fix validation of packet sizes and URLs in ICP - CVE-2026-33526: fix escaping malformed URI twice when sending ICP errors Moderate TuxCare License Agreement CVE-2026-33515 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-32748: fix HttpRequest lifetime for ICP v3 queries Important TuxCare License Agreement CVE-2026-32748 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization - CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices - CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion - CVE-2025-27836: fix potential print buffer overflow in BJ10V device Moderate TuxCare License Agreement CVE-2025-27830 CVE-2025-27835 CVE-2025-27836 CVE-2025-27831 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-12495 CVE-2025-12839 CVE-2025-12840: fix heap buffer overflows in the C core decoding pipeline (missing nread validation in exr_read_chunk, missing packed/unpacked size check for uncompressed tiles, missing storage_mode guard in chunk offset computation) - CVE-2025-64181: fix use of uninitialized memory caused by incompletely populated scratch buffers (addressed by the same precondition guards in chunk.c and parse_header.c) Important TuxCare License Agreement CVE-2025-64181 CVE-2025-12840 CVE-2025-12495 CVE-2025-12839 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-23893: fix symlink-following vulnerabilities in privileged contexts Moderate TuxCare License Agreement CVE-2026-23893 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-45143: fix cookie and host header leak on cross-origin redirect in undici Low TuxCare License Agreement CVE-2023-45143 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-3497: terminate GSSAPI key exchange on protocol errors using ssh_packet_disconnect instead of sshpkt_disconnect (downstream gsskex patch) Important TuxCare License Agreement CVE-2026-3497 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-27631: fix integer overflow in preview component of PSD image parser Moderate TuxCare License Agreement CVE-2026-27631 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-9820: fix stack-based buffer overflow in gnutls_pkcs11_token_init when processing overly long PKCS#11 token labels Moderate TuxCare License Agreement CVE-2025-14831 CVE-2025-9820 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-2588: fix null pointer dereference in re_case_expand Low TuxCare License Agreement CVE-2025-2588 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-20696: fix heap buffer overflow via negative copy length in RAR4 reader Important TuxCare License Agreement CVE-2024-20696 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-10158: fix invalid access to files array via negative parent_ndx Moderate TuxCare License Agreement CVE-2025-10158 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-1972: fix heap buffer overflow in _bfd_elf_slurp_version_tables - CVE-2025-11412: fix out-of-bounds read in bfd_elf_gc_record_vtentry - CVE-2025-11413: fix out-of-bounds read in elf_link_add_object_symbols - CVE-2025-11839: fix abort in tg_tag_type with fuzzed input - CVE-2025-11840: fix SEGV from NULL howto name in coff reloc processing - CVE-2025-3198: fix memory leak in objdump display_info - CVE-2025-69645: fix abort in byte_get_little_endian from malformed DWARF - CVE-2025-69652: fix abort in readelf from malformed DWARF debug info - CVE-2026-4647: fix out-of-bounds read in XCOFF relocation processing Important TuxCare License Agreement CVE-2025-69645 CVE-2025-7546 CVE-2025-7545 CVE-2025-11413 CVE-2025-11412 CVE-2025-11839 CVE-2025-11840 CVE-2025-11082 CVE-2026-4647 CVE-2025-69652 CVE-2025-3198 CVE-2025-5244 CVE-2023-1972 CVE-2025-5245 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-45322: fix use-after-free in xmlStaticCopyNodeList when copying DTDs - CVE-2024-34459: fix buffer over-read in xmlHTMLPrintFileContext in xmllint - CVE-2025-6170: fix potential buffer overflows in xmllint interactive shell - CVE-2025-8732: fix stack overflow from self-referencing SGML CATALOG entries - CVE-2026-0989: add RelaxNG include recursion limit - CVE-2026-0990: prevent infinite recursion in xmlCatalogListXMLResolveURI - CVE-2026-0992: ignore repeated nextCatalog entries in XML catalog parsing - CVE-2026-1757: fix memory leak in xmllint interactive shell Moderate TuxCare License Agreement CVE-2025-6170 CVE-2026-1757 CVE-2026-0990 CVE-2023-45322 CVE-2026-0992 CVE-2024-34459 CVE-2026-0989 CVE-2025-8732 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-1519: fix unbounded NSEC3 iterations when validating referrals to unsigned delegations Important TuxCare License Agreement CVE-2026-1519 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-52316: fix JASPIC authentication bypass on ServerAuthContext exception - CVE-2025-55754: fix ANSI escape sequence injection in log messages - CVE-2025-46701: fix CGI servlet case sensitivity bypass of security constraints Important TuxCare License Agreement CVE-2024-52316 CVE-2025-46701 CVE-2025-55754 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-47711: fix off-by-one for maximum block_status length Moderate TuxCare License Agreement CVE-2025-47711 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-52886: limit amount of annotations per document/page to prevent use-after-free via reference count overflow Moderate TuxCare License Agreement CVE-2025-52886 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-21720: fix denial of service by preventing goroutine leaks and memory exhaustion triggered by unauthenticated avatar cache requests Important TuxCare License Agreement CVE-2026-21720 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-41056: fix possible corruption in sdsResize Important TuxCare License Agreement CVE-2023-41056 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - rebuild with golang 1.25.7-els2 which fixes the following CVEs - - CVE-2026-25679: fix insufficient validation of host/authority in net/url.Parse Important TuxCare License Agreement CVE-2026-25679 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-4519: reject leading dashes in webbrowser URLs - Update pubkeys.txt with refreshed Łukasz Langa GPG key (expired 2025-05-12) Important TuxCare License Agreement CVE-2026-4519 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-4437: fix incorrect record counting in getanswer_ptr that allowed iteration past the answer section boundary in DNS responses - CVE-2026-4438: fix hostname validation checking expected_name instead of name_buffer in getanswer_ptr, which could return invalid hostnames Moderate TuxCare License Agreement CVE-2026-4437 CVE-2026-4438 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-0968: sftp_parse_longname out-of-bounds access Low TuxCare License Agreement CVE-2026-0968 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-1489: fix integer overflow in Unicode case conversion functions - CVE-2026-1484: fix integer overflow in GLib Base64 encoding - CVE-2026-1485: fix buffer underflow in content type treemagic parsing - CVE-2026-0988: fix integer overflow in g_buffered_input_stream_peek() - CVE-2025-7039: fix integer overflow in temporary file creation Moderate TuxCare License Agreement CVE-2026-0988 CVE-2026-1485 CVE-2026-1489 CVE-2025-7039 CVE-2026-1484 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-13151: fix stack-based buffer overflow in asn1_expand_octet_string, _asn1_expand_object_id Moderate TuxCare License Agreement CVE-2025-13151 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-29508: fix heap-based pointer disclosure in pdf_base_font_alloc Low TuxCare License Agreement CVE-2024-29508 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-2921: fix RIFF palette integer overflow Important TuxCare License Agreement CVE-2026-2921 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-30892: fix incorrect parsing of --user option in crun exec Important TuxCare License Agreement CVE-2026-30892 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - Rebuild with Go 1.25.8 to fix Go standard library CVE - CVE-2026-25679: reject invalid IPv6 host literals in net/url.Parse to prevent URL validation bypass Important TuxCare License Agreement CVE-2026-25679 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-4105: machined: reject invalid class types when registering machines Moderate TuxCare License Agreement CVE-2026-4105 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-34526: fix stack buffer overflow in _TIFFVGetField via invalid codec-specific tag - CVE-2023-2908: fix null pointer dereference in countInkNamesString in tif_dir.c - CVE-2023-6277: prevent out-of-memory attacks by comparing allocation size with file size - CVE-2023-1916: fix out-of-bounds read in extractImageSection in tiffcrop.c - CVE-2023-3164: fix heap-buffer-overflow in extractImageSection in tiffcrop.c Moderate TuxCare License Agreement CVE-2023-3164 CVE-2022-34526 CVE-2023-2908 CVE-2023-6277 CVE-2023-1916 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-3083: fix rtpqdm2depay OOB write - CVE-2026-3085: fix rtpqdm2depay heap-based buffer overflow Important TuxCare License Agreement CVE-2026-3085 CVE-2026-3083 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-33416: fix use-after-free in png_set_tRNS and png_set_PLTE due to aliased heap buffers Important TuxCare License Agreement CVE-2026-33416 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-5745: fix NULL pointer dereference in ACL parsing in archive_acl_from_text_w() Moderate TuxCare License Agreement CVE-2026-5745 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-44840: fix heap buffer overflow in find_section_in_set in dwarf.c - CVE-2023-25584: fix lack of bounds checking in vms-alpha.c parse_module - CVE-2022-47673: fix OOB reads in parse_module - CVE-2022-47696: fix uninitialised the_bfd field in mach-o.c synthetic symbols - CVE-2022-45703: fix heap buffer overflow in display_gdb_index in dwarf.c Important TuxCare License Agreement CVE-2023-25584 CVE-2022-47696 CVE-2022-44840 CVE-2022-45703 CVE-2022-47673 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-47606: fix integer overflow when allocating sysmem Critical TuxCare License Agreement CVE-2024-47606 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-40403: make generate-id() deterministic to prevent memory layout leak Moderate TuxCare License Agreement CVE-2023-40403 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-35387: correctly match ECDSA signature algorithms against HostKeyAlgorithms, PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms - CVE-2026-35388: add missing askpass check when using ControlMaster=ask/autoask and "ssh -O proxy ..." - CVE-2026-35414: fix authorized_keys principals option matching to compare comma-separated entries individually instead of using match_list Important TuxCare License Agreement CVE-2026-35388 CVE-2026-35387 CVE-2026-35414 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-27651: fix null pointer dereference in ngx_mail_auth_http_module when clearing password in auth http requests with CRAM-MD5/APOP - CVE-2026-27654: fix heap buffer overflow in DAV module when COPY/MOVE destination URI is shorter than alias - CVE-2026-32647: fix buffer over-read/over-write in mp4 module when processing empty stco and co64 atoms Important TuxCare License Agreement CVE-2026-27654 CVE-2026-32647 CVE-2026-27651 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-7264: fix ASN.1 GTime2str() heap buffer over-read caused by off-by-one in fractional seconds length calculation Moderate TuxCare License Agreement CVE-2024-7264 CVE-2025-14017 CVE-2023-46219 CVE-2023-28320 CVE-2024-11053 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-3441: heap OOB read via XTY_LD x_scnlen csect index - CVE-2026-3442: OOB read on r_symndx before sym_hashes[] indexing Important TuxCare License Agreement CVE-2026-3442 CVE-2026-3441 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-5119: fix cleartext transmission of cookies to HTTP proxy in tunnel_connect() CONNECT request for HTTPS targets Important TuxCare License Agreement CVE-2026-5119 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-27784: fix integer overflow in mp4 module atom entry validation on 32-bit platforms Moderate TuxCare License Agreement CVE-2026-27784 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-39742: fix segfault in getarg.c Moderate TuxCare License Agreement CVE-2023-39742 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-46045: fix out-of-bounds read via crafted config6a file Important TuxCare License Agreement CVE-2023-46045 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-32364: fix floating-point exception in PSStack::roll when handling malformed PostScript input with INT_MIN Moderate TuxCare License Agreement CVE-2025-32364 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-1467: validate URI host characters when checking if a URI is valid - CVE-2026-1539: fix proxy credentials leak on cross-origin HTTP redirect Moderate TuxCare License Agreement CVE-2026-1467 CVE-2026-1539 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job - CVE-2026-39314: range check job-password-supported to prevent integer underflow in _ppdCreateFromIPP - CVE-2026-39316: expire per-printer subscriptions before deleting the printer to prevent use-after-free in cupsdDeleteTemporaryPrinters Important TuxCare License Agreement CVE-2026-34980 CVE-2026-39316 CVE-2026-39314 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote entry value handling - CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote handling - CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size checks Important TuxCare License Agreement CVE-2026-40386 CVE-2026-40385 CVE-2026-32775 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-26996: fix ReDoS in bundled minimatch caused by consecutive non-globstar * characters, by coalescing them during pattern compilation - CVE-2026-27904: fix ReDoS in bundled minimatch from nested extglobs and multiple non-adjacent ** wildcards, by limiting globstar recursion Important TuxCare License Agreement CVE-2026-26996 CVE-2026-27904 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-2239: fix heap-buffer-overflow in fread_pascal_string when processing PSD files and a follow-up NULL pointer dereference in load_resource_1006 alpha names handling - CVE-2026-2272: fix integer overflow in ICO file loading Moderate TuxCare License Agreement CVE-2026-2239 CVE-2026-2272 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-1801: use CRLF as line boundary when parsing chunked encoding data to prevent HTTP request smuggling via lone LF - CVE-2026-2443: reject Range header ends exceeding content length to prevent out-of-bounds read in byte range handling Moderate TuxCare License Agreement CVE-2026-1801 CVE-2026-2443 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-4424: fix heap out-of-bounds read in RAR reader due to LZSS window size mismatch after PPMd block Important TuxCare License Agreement CVE-2026-4424 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-12086: prevent info leak during file transfer by refusing malicious fuzzy operations and confining basis-file opens to the destination via secure_relative_open() Moderate TuxCare License Agreement CVE-2024-12086 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-21714: fix HTTP/2 Http2Session memory leak triggered by a connection-level WINDOW_UPDATE that overflows the flow control window Moderate TuxCare License Agreement CVE-2026-21714 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-23868: fix double-free in GifMakeSavedImage Important TuxCare License Agreement CVE-2026-23868 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-3234 fix heap buffer overflow in op_replace() when replacing NUL after Tab in virtualedit mode Important TuxCare License Agreement CVE-2022-3234 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-34588 fix signed 32-bit integer overflow in PIZ decoder wavelet buffer arithmetic leading to out-of-bounds read/write Important TuxCare License Agreement CVE-2026-34588 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-39908: fix ReDoS in REXML parser for repeated `>` / character reference payloads - CVE-2024-41123: fix ReDoS in REXML source.match when no terminator string is specified - CVE-2024-41946: add XML entity expansion limit to REXML SAX and pull parsers - CVE-2024-43398: fix DoS via deep elements with namespace-conflicted attributes in REXML tree parser Important TuxCare License Agreement CVE-2024-43398 CVE-2024-41946 CVE-2024-41123 CVE-2024-39908 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-2889: fix use-after-free with multiple line breaks in Vim9 expression by deferring the free of evalarg->eval_tofree Important TuxCare License Agreement CVE-2022-2889 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-47007: fix memory leak in stab_demangle_v3_arg - CVE-2022-47008: fix memory leak in make_tempdir and make_tempname - CVE-2022-47011: fix memory leak in parse_stab_struct_fields - CVE-2022-47010: fix memory leak in pr_function_type - CVE-2022-48063: fix excessive memory allocation in load_specific_debug_section for corrupt ELF - CVE-2022-48064: fix SHT_NOBITS section size sanity check in find_debug_info - CVE-2022-48065: fix memory leak in find_abstract_instance on duplicate DW_AT_decl_file - CVE-2022-38533: fix rewrite_elf_program_header looping on crafted file (strip/objcopy) Moderate TuxCare License Agreement CVE-2022-38533 CVE-2022-48065 CVE-2022-47008 CVE-2022-48064 CVE-2022-48063 CVE-2022-47011 CVE-2022-47010 CVE-2022-47007 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-25679: rebuild against golang-1.25.7-1.tuxcare.els2 which contains the net/url IPv6 host-literal parsing fix Important TuxCare License Agreement CVE-2026-25679 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - rebuild with newer golang version 1.25.7-1.el9_6.tuxcare.els2 to fix the following CVE - CVE-2026-25679: fix insufficient validation of host/authority in net/url.Parse by rejecting invalid URLs with IPv6 literals not at the start of the host Important TuxCare License Agreement CVE-2026-25679 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - rebuild with newer golang 1.25.7-1.el9_6.tuxcare.els2 to fix CVE-2026-25679 (net/url: reject IPv6 literal not at start of host) Important TuxCare License Agreement CVE-2026-25679 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-47712: fix integer overflow in blocksize filter extents callback Moderate TuxCare License Agreement CVE-2025-47712 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - rebuild with newer golang version 1.25.7-1.el9_6.tuxcare.els2 to fix the following CVE - CVE-2026-25679: reject IPv6 literals not at the start of the host subcomponent in net/url.Parse to prevent URL authority validation bypass Important TuxCare License Agreement CVE-2026-25679 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-4156: fix heap out-of-bounds read flaw in builtin.c to prevent potential crash and information leakage Important TuxCare License Agreement CVE-2023-4156 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-41317: fix exposure of sensitive cache manager information via non-HTTP URI schemes due to typo in default manager ACL regex - CVE-2023-49288: fix use-after-free in StoreEntry::startWriting() reachable via oversized replies with collapsed_forwarding enabled Important TuxCare License Agreement CVE-2022-41317 CVE-2023-49288 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-34352: prevent other users reading x0vncserver screen Critical TuxCare License Agreement CVE-2026-34352 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - Rebuild with Go 1.25.8 to fix Go standard library CVE - CVE-2026-25679: reject invalid IPv6 host literals in net/url.Parse to prevent URL validation bypass Important TuxCare License Agreement CVE-2026-25679 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2021-4173: fix double free in Vim9 nested :def function definition - CVE-2022-3352: fix use-after-free when SpellFileMissing autocmd deletes the current buffer during spell file loading - CVE-2022-2343: fix heap buffer overflow in ins_compl_add_infercase() when completing a long line with 'infercase' set Important TuxCare License Agreement CVE-2022-3352 CVE-2022-2343 CVE-2022-2344 CVE-2022-1619 CVE-2022-2287 CVE-2022-4141 CVE-2022-2129 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - Fix CVE-2026-5121: heap buffer overflow in ISO9660 reader via invalid pz_log2_bs value in Rock Ridge ZF extension Important TuxCare License Agreement CVE-2026-5121 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-0586: fix infinite loop in RTMPT dissector rtmpt_get_amf_length Important TuxCare License Agreement CVE-2022-0586 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-34986: fix go-jose panic on JWE decryption when encrypted_key field is empty Important TuxCare License Agreement CVE-2026-34986 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-2906: fix divide-by-zero in CP2179 timetag info response dissector Moderate TuxCare License Agreement CVE-2023-2906 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - Upgrade to openjdk-11.0.30+7 (GA). The following CVEs were fixed: - CVE-2026-21945: enhance certificate checking - CVE-2026-21932: enhance handling of URIs - CVE-2026-21933: improve HttpServer request handling - CVE-2026-21925: improve JMX connections - CVE-2025-64720: update libpng to 1.6.51 - CVE-2025-65018: update libpng to 1.6.51 Important TuxCare License Agreement CVE-2025-21502 CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 CVE-2025-65018 CVE-2025-30698 CVE-2025-53066 CVE-2025-53057 CVE-2025-30691 CVE-2025-64720 CVE-2025-21587 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-25883: fix ReDoS in bundled npm semver new Range and parseComparator caused by unbounded whitespace expansion in version ranges - CVE-2026-21710: fix HTTP prototype pollution in http.get/request via headersDistinct option by using null-prototype objects for header storage - CVE-2026-27135: fix bundled nghttp2 IGN_ALL flag bypass that allowed attackers to ignore header validation and smuggle malformed HTTP/2 requests Important TuxCare License Agreement CVE-2026-27135 CVE-2026-21710 CVE-2022-25883 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2006-10003: fix off-by-one heap buffer overflow in st_serial_stack growth check in Expat/Expat.xs startElement(); also backport upstream follow-up 2abd177 to initialize st_serial_stacksize=1024 after allocation Critical TuxCare License Agreement CVE-2006-10003 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - Rebuild against recent Go compiler - CVE-2026-25679: fix net/url insufficient validation of host in url.Parse Important TuxCare License Agreement CVE-2026-25679 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-4631: Fix SSH command-line argument injection in cockpit-ws / beiboot (Critical RCE) Critical TuxCare License Agreement CVE-2026-4631 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-67030: fix Zip Slip / directory traversal in Expand.extractFile (canonical path check) Important TuxCare License Agreement CVE-2025-67030 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-4504: validate PPD PostScript input length to prevent heap-based buffer overflow in raster-interpret.c Important TuxCare License Agreement CVE-2023-4504 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-40169: fix out-of-bounds heap write in JSON encoder montageDirectory loop Moderate TuxCare License Agreement CVE-2026-40169 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2021-3826: fix heap/stack buffer overflow in libiberty d-demangle dlang_symbol_backref Moderate TuxCare License Agreement CVE-2021-3826 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - Rebuild for tuxcare9.6esu Important TuxCare License Agreement CVE-2022-41409 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-47466: Fix segmentation violation and application crash during tag writing via crafted WAV file Important TuxCare License Agreement CVE-2023-47466 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-34079: prevent arbitrary file deletion via ld.so cache symlink Important TuxCare License Agreement CVE-2026-34079 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - Update to 2.50.6 to fix the following vulnerabilities (WSA-2026-0001): - CVE-2025-43213: type confusion in JavaScriptCore (fixed in 2.50.5) - CVE-2025-43214: out-of-bounds read in WebCore (fixed in 2.50.5) - CVE-2025-43457: integer overflow in WebKit canvas rendering (fixed in 2.50.6) - CVE-2025-43511: memory corruption in WebRTC (fixed in 2.50.5) - CVE-2026-20608: use-after-free in WebKit DOM (fixed in 2.50.6) - CVE-2026-20635: out-of-bounds access in JavaScriptCore (fixed in 2.50.6) - CVE-2026-20636: type confusion in WebAssembly (fixed in 2.50.6) - CVE-2026-20644: cross-origin issue in WebKit Storage (fixed in 2.50.6) - CVE-2026-20652: memory corruption in MediaStream (fixed in 2.50.6) - Disable %{gpgverify} step: upstream's signing key is DSA-1024 which EL9 crypto-policies reject; keyring retained for manual verification Important TuxCare License Agreement CVE-2025-43213 CVE-2025-43511 CVE-2025-43214 CVE-2026-20635 CVE-2026-20652 CVE-2026-20608 CVE-2026-20636 CVE-2025-43457 CVE-2026-20644 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-41079: limit num_bytes for SNMP string values to prevent out-of-bounds read in asn1_decode_snmp Moderate TuxCare License Agreement CVE-2026-41079 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-35385: clear setuid/setgid bits when downloading files as root in scp legacy (-O) mode without the -p flag Important TuxCare License Agreement CVE-2026-35385 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-2920: asfdemux: error out on files with more than 32 streams - CVE-2026-2922: rmdemux: check fragment overflow before storing - CVE-2026-2922: rmdemux: avoid integer overflow when checking video fragment size Important TuxCare License Agreement CVE-2026-2920 CVE-2026-2922 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431} - crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431} - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431} - crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431} - crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431} - crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - ptp: fix integer overflow in max_vclocks_store {CVE-2024-40994} - xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426} - net: hns3: add VLAN id validation before using {CVE-2025-71112} - scsi: qla2xxx: Fix improper freeing of purex item {CVE-2025-68741} - tracing: Consider the NULL character when validating the event length {CVE-2024-50131} - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870} - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() {CVE-2026-23111} - team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091} - i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990} - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert {CVE-2025-38387} - ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386} - drm/tegra: Fix a possible null pointer dereference {CVE-2025-38363} - ACPICA: fix acpi operand cache leak in dswstate.c {CVE-2025-38345} - ACPICA: fix acpi parse and parseext cache leaks {CVE-2025-38344} - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337} - x86/sgx: Prevent attempts to reclaim poisoned pages {CVE-2025-38334} - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324} - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table {CVE-2025-38319} - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() {CVE-2025-38312} - seg6: Fix validation of nexthop addresses {CVE-2025-38310} - bpf: Fix WARN() in get_bpf_raw_tp_regs {CVE-2025-38285} - atm: clip: prevent NULL deref in clip_push() {CVE-2025-38251} - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference {CVE-2025-38231} - ext4: inline: fix len overflow in ext4_prepare_inline_data {CVE-2025-38222} - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215} - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38214} - atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190} - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184} - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181} - thunderbolt: Do not double dequeue a configuration request {CVE-2025-38174} - bpf: fix ktls panic with sockmap {CVE-2025-38166} - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO {CVE-2025-38122} - net_sched: sch_sfq: fix a potential crash on gso_skb handling {CVE-2025-38115} - x86/iopl: Cure TIF_IO_BITMAP inconsistencies {CVE-2025-38100} - dma-buf: insert memory barrier before updating num_fences {CVE-2025-38095} - net_sched: prio: fix a race in prio_tune() {CVE-2025-38083} - libnvdimm/labels: Fix divide error in nd_label_data_init() {CVE-2025-38072} - dm cache: prevent BUG_ON by blocking retries on failed device resumes {CVE-2025-38066} - dm: fix unconditional IO throttle caused by REQ_PREFLUSH {CVE-2025-38063} - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() {CVE-2025-38061} - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock {CVE-2025-38058} - media: cx231xx: set device_caps for 417 {CVE-2025-38044} - firmware: arm_ffa: Set dma_mask for ffa devices {CVE-2025-38043} - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs {CVE-2025-38040} - vxlan: Annotate FDB data races {CVE-2025-38037} - nvmet-tcp: don't restore null sk_state_change {CVE-2025-38035} - nfs: handle failure of nfs_get_lock_context in unlock path {CVE-2025-38023} - wifi: mt76: disable napi on driver removal {CVE-2025-38009} - openvswitch: Fix unsafe attribute parsing in output_userspace() {CVE-2025-37998} - netfilter: ipset: fix region locking in hash types {CVE-2025-37997} - module: ensure that kobject_put() is safe for module type kobjects {CVE-2025-37995} - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() {CVE-2025-37990} - USB: wdm: close race between wdm_open and wdm_wwan_port_stop {CVE-2025-37985} - usb: typec: ucsi: displayport: Fix deadlock {CVE-2025-37967} - bpf: Scrub packet on bpf_redirect_peer {CVE-2025-37959} - xenbus: Use kref to track req lifetime {CVE-2025-37949} - ftrace: Add cond_resched() to ftrace_graph_set_hash() {CVE-2025-37940} - drm/sched: Increment job count before swapping tail spsc queue {CVE-2025-38515} - intel_th: Fix a resource leak in an error handling path {CVE-2022-50143} - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer {CVE-2025-39937} - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() {CVE-2025-39876} - i2c: qup: jump out of the loop in case of timeout {CVE-2025-38671} - regulator: core: fix NULL dereference on unbind due to stale coupling data {CVE-2025-38668} - PM / devfreq: Check governor before using governor->name {CVE-2025-38609} - inotify: Avoid reporting event with invalid wd {CVE-2023-54119} - net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204} - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies {CVE-2025-40096} - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) {CVE-2025-39932} - xfs: do not propagate ENODATA disk errors into xattr code {CVE-2025-39835} - fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322} - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() {CVE-2025-39737} - bpf: Do not let BPF test infra emit invalid GSO types to stack {CVE-2025-68725} - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() {CVE-2025-39808} - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure {CVE-2025-71154} - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() {CVE-2025-39795} - drm/amdkfd: Destroy KFD debugfs after destroy KFD wq {CVE-2025-39706} - sctp: initialize more fields in sctp_v6_from_sk() {CVE-2025-39812} - scsi: qla4xxx: Prevent a potential error pointer dereference {CVE-2025-39676} - libceph: return the handler error from mon_handle_auth_done() {CVE-2026-22992} - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock {CVE-2025-68223} - jbd2: prevent softlockup in jbd2_log_do_checkpoint() {CVE-2025-39782} - net: sock: fix hardened usercopy panic in sock_recv_errqueue {CVE-2026-22977} - wifi: ath11k: clear initialized flag for deinit-ed srng lists {CVE-2025-38601} - team: Move team device type change at the end of team_port_add {CVE-2025-68340} - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060} - libceph: make free_choose_arg_map() resilient to partial allocation {CVE-2026-22991} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd {CVE-2025-71147} - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump {CVE-2025-39813} - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() {CVE-2025-39845} - rxrpc: Fix oops due to non-existence of prealloc backlog struct {CVE-2025-38514} - netfilter: ctnetlink: fix refcount leak on table dump {CVE-2025-38721} - bpf: Reject %p% format string in bprintf-like helpers {CVE-2025-38528} - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() {CVE-2025-39675} - net/packet: fix a race in packet_set_ring() and packet_notifier() {CVE-2025-38617} - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr {CVE-2025-38701} - cgroup: split cgroup_destroy_wq into 3 workqueues {CVE-2025-39953} - NFS: Fix the setting of capabilities when automounting a new filesystem {CVE-2025-39798} - fs: Prevent file descriptor table allocations exceeding INT_MAX {CVE-2025-39756} - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() {CVE-2025-39713} - wifi: mac80211: reject TDLS operations when station is not associated {CVE-2025-38644} - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() {CVE-2025-38706} - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated {CVE-2025-38700} - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path {CVE-2025-39929} - mm: move page table sync declarations to linux/pgtable.h {CVE-2025-39844} - ppp: fix memory leak in pad_compress_skb {CVE-2025-39847} - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras {CVE-2025-38540} - libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984} - iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() {CVE-2026-23231} - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} - macvlan: fix possible UAF in macvlan_forward_source() {CVE-2026-23001} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800} - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list {CVE-2026-23084} - wifi: ath10k: fix dma_free_coherent() pointer {CVE-2026-23133} - wifi: ath11k: fix node corruption in ar->arvifs list {CVE-2025-38293} - x86/mm: Check return value from memblock_phys_alloc_range() {CVE-2025-38071} - net: Fix TOCTOU issue in sk_is_readable() {CVE-2025-38112} - net: phy: mscc: Fix memory leak when using one step timestamping {CVE-2025-38148} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure {CVE-2026-23144} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193} - nfsd: provide locking for v4_end_grace {CVE-2026-22980} - migrate: correct lock ordering for hugetlb file folios {CVE-2026-23097} - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls {CVE-2025-38608} - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure {CVE-2025-38695} - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock {CVE-2025-39736} - net: drop UFO packets in udp_rcv_segment() {CVE-2025-38622} - net: bridge: fix soft lockup in br_multicast_query_expired() {CVE-2025-39773} - iwlwifi: Add missing check for alloc_ordered_workqueue {CVE-2025-38602} - net, hsr: reject HSR frame if skb can't hold tag {CVE-2025-39703} - crypto: ccp - Fix crash when rebind ccp device for ccp.ko {CVE-2025-38581} - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() {CVE-2025-39742} - net: stmmac: make sure that ptp_rate is not 0 before configuring EST {CVE-2025-38125} - net/sched: Restrict conditions for adding duplicating netems to qdisc tree {CVE-2025-38553} - io_uring/net: commit partial buffers on retry {CVE-2025-38730} - perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563} - ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191} Important TuxCare License Agreement CVE-2025-38100 CVE-2026-23084 CVE-2025-39703 CVE-2026-23231 CVE-2025-39847 CVE-2025-38563 CVE-2025-38319 CVE-2025-38095 CVE-2025-39736 CVE-2025-37995 CVE-2025-38009 CVE-2025-39773 CVE-2026-23144 CVE-2025-39932 CVE-2025-38528 CVE-2025-38540 CVE-2026-23111 CVE-2026-23089 CVE-2025-38324 CVE-2025-38035 CVE-2025-38514 CVE-2025-68223 CVE-2024-50131 CVE-2025-38044 CVE-2025-38231 CVE-2025-39756 CVE-2025-37985 CVE-2025-39876 CVE-2024-46738 CVE-2025-38122 CVE-2025-39937 CVE-2025-39713 CVE-2025-38700 CVE-2026-22980 CVE-2025-39737 CVE-2025-40096 CVE-2025-38043 CVE-2025-39676 CVE-2025-38644 CVE-2025-37940 CVE-2025-71147 CVE-2022-50143 CVE-2026-23204 CVE-2025-38083 CVE-2025-38617 CVE-2025-40322 CVE-2025-68800 CVE-2025-38115 CVE-2023-53426 CVE-2025-37990 CVE-2025-38181 CVE-2025-38344 CVE-2026-23133 CVE-2025-37998 CVE-2025-38148 CVE-2025-38721 CVE-2025-38345 CVE-2025-39706 CVE-2025-38608 CVE-2025-38386 CVE-2025-39845 CVE-2025-39835 CVE-2025-38701 CVE-2025-38671 CVE-2025-39953 CVE-2025-39782 CVE-2026-23001 CVE-2026-23216 CVE-2025-38310 CVE-2025-38363 CVE-2025-38285 CVE-2025-38337 CVE-2025-38071 CVE-2025-38190 CVE-2025-37997 CVE-2025-38184 CVE-2025-38581 CVE-2025-39795 CVE-2026-22984 CVE-2025-38334 CVE-2025-38066 CVE-2026-22990 CVE-2025-39844 CVE-2025-38222 CVE-2022-49870 CVE-2025-38706 CVE-2025-38601 CVE-2025-38312 CVE-2025-38058 CVE-2025-38023 CVE-2025-39929 CVE-2025-38387 CVE-2025-39812 CVE-2025-39813 CVE-2025-38215 CVE-2025-38037 CVE-2025-37959 CVE-2026-22977 CVE-2025-38293 CVE-2025-38695 CVE-2024-40994 CVE-2026-23061 CVE-2025-71091 CVE-2025-39742 CVE-2025-71112 CVE-2022-50422 CVE-2025-38174 CVE-2025-38063 CVE-2026-22991 CVE-2026-23191 CVE-2026-23060 CVE-2022-49900 CVE-2025-38061 CVE-2025-38072 CVE-2025-38214 CVE-2025-38668 CVE-2025-38553 CVE-2025-38515 CVE-2025-37967 CVE-2025-71154 CVE-2025-39808 CVE-2025-38251 CVE-2025-38622 CVE-2025-68741 CVE-2025-71089 CVE-2025-38602 CVE-2025-38125 CVE-2025-39798 CVE-2026-31431 CVE-2025-38730 CVE-2025-38166 CVE-2026-22992 CVE-2023-54119 CVE-2025-38112 CVE-2025-38609 CVE-2025-68725 CVE-2025-38040 CVE-2025-39675 CVE-2026-23097 CVE-2026-23193 CVE-2025-37949 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-2369: fix integer underflow in sniff_unknown() on zero-length buffer that caused an out-of-bounds read in the content sniffer Critical TuxCare License Agreement CVE-2026-2369 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-33412: fix OS command injection via newline in glob() by adding \n to SHELL_SPECIAL in src/os_unix.c so newlines are escaped before the pattern is passed to the user's shell Important TuxCare License Agreement CVE-2026-33412 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-2183: fix out-of-bounds read in get_lisp_indent() (src/indent.c) by guarding the `that++; amount++;` advance with `if (*that != NUL)` so the lisp auto-indent pointer does not walk past the line's NUL terminator Important TuxCare License Agreement CVE-2022-2183 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-35091: fix incorrect return value in check_memb_commit_token_sanity allowing DoS via crafted memb_commit_token packet - CVE-2026-35092: fix integer overflow in check_memb_join_sanity allowing bypass of length validation via crafted memb_join packet Important TuxCare License Agreement CVE-2026-35091 CVE-2026-35092 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-32316: fix heap buffer overflow in jvp_string_append and jvp_string_copy_replace_bad - CVE-2026-39979: fix out-of-bounds read in jv_parse_sized Important TuxCare License Agreement CVE-2026-32316 CVE-2026-39979 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-5201: fix heap-based buffer overflow in JPEG loader due to improper validation of color component counts Important TuxCare License Agreement CVE-2026-5201 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-4786: fix webbrowser %action substitution bypass of the dash-prefix safety check by validating the post-substitution URL and expanding %action before %s in UnixBrowser argument assembly Important TuxCare License Agreement CVE-2026-4786 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-35177: fix path traversal bypass in zip.vim by using simplify() to detect attacks that circumvent the previous regex-only check - CVE-2026-39881: fix command injection in netbeans interface via unsanitized defineAnnoType and specialKeys parameters Important TuxCare License Agreement CVE-2026-39881 CVE-2026-35177 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-4786: fix webbrowser %action substitution bypass of the dash-prefix safety check by validating the post-substitution URL and expanding %action before %s in UnixBrowser argument assembly Important TuxCare License Agreement CVE-2026-4786 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-21413: fix heap-based buffer overflow in LibRaw::lossless_jpeg_load_raw by adding (unsigned)col < raw_width bounds check before the RAW(row, col) write Critical TuxCare License Agreement CVE-2026-21413 CVE-2026-24450 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2021-3928: fix reading uninitialized memory in spell suggestions (spellsuggest.c) - CVE-2022-1616: fix buffer overflow in invalid command with composing chars (ex_docmd.c) - CVE-2022-1620: fix NULL pointer dereference when using invalid pattern (buffer.c) Important TuxCare License Agreement CVE-2021-3928 CVE-2022-1616 CVE-2022-1620 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-27877: fix exposure of direct data-source passwords via public dashboards by limiting frontend settings to data sources actually used by the dashboard - Note: upstream test additions in pkg/api/frontendsettings_test.go are not backported. The %check stage only runs the Jest frontend suite (gated on 0), so backend Go tests would not be exercised by this build, and the upstream test depends on hs.publicDashboardsService which does not exist in 10.2.6 (the production fix already uses the hs.PublicDashboardsApi.PublicDashboardService adapter for the same reason) Important TuxCare License Agreement CVE-2026-27877 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-42516: fix HTTP response splitting in core via Content-Type response header (header_filter rewrite) - CVE-2024-43204: prevent SSRF via mod_headers RequestHeader set/edit Content-Type modifying response headers - CVE-2024-43394: expand UNC path checking with new ap_stat_check helper (Linux: defense-in-depth no-op); fold in upstream fix for CVE-2025-54090 (RewriteCond expr always evaluating true regression) Moderate TuxCare License Agreement CVE-2024-43204 CVE-2024-42516 CVE-2024-43394 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-31790: fix RSA KEM RSASVE encapsulation memory leak by validating RSA_public_encrypt() return value and cleansing secret on failure Important TuxCare License Agreement CVE-2024-13176 CVE-2026-28390 CVE-2026-31790 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-3082: fix jpegparser boundary check before copying - CVE-2026-2923: fix dvbsuboverlay missing bounds checks in parser Important TuxCare License Agreement CVE-2026-2923 CVE-2026-3082 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-5197: fix integer overflows in image allocation and wrapping logic Critical TuxCare License Agreement CVE-2024-5197 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-27135: fix missing iframe->state validations to avoid assertion failure Important TuxCare License Agreement CVE-2026-27135 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-2124: fix out-of-bounds read in current_quote() when searching for quotes goes over the end of the line (textobject.c, upstream patch 8.2.5120) - CVE-2022-2126: fix invalid index use in suggest_trie_walk() when ts_fidx is zero (spellsuggest.c, upstream patch 8.2.5123) - CVE-2022-2207: fix read before start of line with BS in Replace mode (edit.c, upstream patch 8.2.5162) - CVE-2022-1720: fix read past end of line with "gf" in Visual block mode (normal.c, upstream patch 8.2.4956) - CVE-2022-2042: fix uninitialized value and use-after-free in spell command (spell.c, upstream patch 8.2.5072) Important TuxCare License Agreement CVE-2022-2124 CVE-2022-2207 CVE-2022-2042 CVE-2022-2126 CVE-2022-1720 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-33999: fix buffer re-use in xkb _XkbSetCompatMap that miscounted valid entries and could cause buffer overflow on subsequent SetCompatMap requests (bundled xorg-server) - CVE-2026-34001: fix use-after-free in miext/sync miSyncTriggerFence by retaining a ref on the SyncFence across the trigger callback (bundled xorg-server) - CVE-2026-34003: add bound checking in xkb CheckKeyTypes() to prevent reading past the request data on a crafted SetMap request (bundled xorg-server) Important TuxCare License Agreement CVE-2026-34001 CVE-2026-33999 CVE-2026-34003 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-2125: fix out-of-bounds read in get_lisp_indent(); break out of the inner loop on NUL byte (indent.c, upstream patch 8.2.5122) - CVE-2021-3974: fix use-after-free in nfa_regmatch() when a substitute callback frees the regline during a mark comparison; save col and re-fetch rex.line via reg_getline() after getmark_buf() (regexp.c + regexp_nfa.c, upstream patch 8.2.3612) - CVE-2022-2206: fix OOB read after terminal resize lowers Rows below cmdline_row / msg_row; clamp both to Rows - 1 in check_shellsize() (term.c, upstream patch 8.2.5160) - CVE-2022-2946: fix use-after-free in do_tag() when 'tagfunc' deletes the buffer; make a vim_strsave copy of the tagstack tagname before calling user code (tag.c, upstream patch 9.0.0246) - CVE-2022-2286: fix heap-buffer-overflow in the Ctrl-E completion-stop path when the completion leader shrinks below the original text; bounds-check compl_len against replacement string length before ins_bytes_len() (insexpand.c, upstream patch 9.0.0020) Important TuxCare License Agreement CVE-2022-2206 CVE-2022-2286 CVE-2022-3324 CVE-2022-2125 CVE-2022-2946 CVE-2022-4292 CVE-2022-3256 CVE-2022-2175 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - Update to jdk-21.0.11+10 (GA) - Resolves Oracle April 2026 CPU CVEs: CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-34268, CVE-2026-34282 - CVE-2026-23865: integer overflow in tt_var_load_item_variation_store in bundled FreeType (fixed via bump to 2.14.2) - Update FIPS patch to feef2dc3ca7 - Bump bundled freetype 2.13.3 -> 2.14.2, giflib 5.2.2 -> 6.1.2, harfbuzz 11.2.0 -> 12.3.2, libpng 1.6.51 -> 1.6.57, zlib 1.3.1 -> 1.3.2 - Add JDK-8375294 EOPNOTSUPP patch (carried by AlmaLinux 9 ahead of 21.0.13) Important TuxCare License Agreement CVE-2026-34268 CVE-2026-22007 CVE-2026-34282 CVE-2026-22016 CVE-2026-23865 CVE-2026-22013 CVE-2026-22021 CVE-2026-22018 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-33416: fix use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE - CVE-2026-33636: fix out-of-bounds read/write in ARM NEON palette expansion Important TuxCare License Agreement CVE-2026-33416 CVE-2026-33636 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE fix for: CVE-2026-33999, CVE-2026-34001, CVE-2026-34003 Important TuxCare License Agreement CVE-2026-34001 CVE-2026-33999 CVE-2026-34003 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-23918: fix double free via double stream purge in mod_http2 Important TuxCare License Agreement CVE-2026-23918 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-35535: drop group privileges and supplementary groups before running the mailer in exec_mailer(), make setuid/setgid/setgroups failures fatal, and pass user gid alongside uid when NO_ROOT_MAILER is defined Important TuxCare License Agreement CVE-2026-35535 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-4878: cap_set_file() TOCTOU race via path-based xattr operations Important TuxCare License Agreement CVE-2026-4878 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-4775: fix signed integer overflow in YCbCr tile decoder helpers in TIFFReadRGBAImage() that could lead to heap overflow on crafted images with huge width Important TuxCare License Agreement CVE-2026-4775 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-48988: limit number and header size of multipart parts - CVE-2025-52520: use Math.addExact and long postSize to prevent overflow bypass of maxPostSize during multipart upload Moderate TuxCare License Agreement CVE-2025-48988 CVE-2025-52520 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-0529: fix heap-based buffer overflow in wide_to_local_string - CVE-2022-0530: fix null pointer dereference on invalid UTF-8 input Moderate TuxCare License Agreement CVE-2022-0529 CVE-2022-0530 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-0158: fix Vim9 reading before start of line with single $ - CVE-2022-0696: fix crash when switching tabpage in cmdline window - CVE-2022-1674: fix crash when matching buffer with invalid pattern - CVE-2022-1725: fix using NULL regexp program in buffer matching - CVE-2022-1771: fix recursive command line crash by limiting getcmdline depth - CVE-2022-2208: fix crash when deleting buffers in diff mode - CVE-2022-2598: fix invalid memory access in diff mode with dp and undo - CVE-2022-2874: fix NULL pointer when skipping compiled Vim9 code - CVE-2022-2923: fix crash with mkspell on empty dictionary file - CVE-2022-2980: fix crash with mouse click when TabPageIdxs not initialized Moderate TuxCare License Agreement CVE-2022-1771 CVE-2022-0696 CVE-2022-2208 CVE-2022-0158 CVE-2022-1725 CVE-2022-1674 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-33948: fix NUL truncation in JSON parser (validation bypass) - CVE-2026-33947: fix unbounded recursion stack overflow in jv_setpath/getpath/delpaths Moderate TuxCare License Agreement CVE-2026-33947 CVE-2026-33948 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-6100: fix possible use-after-free in bz2 and lzma decompressors Critical TuxCare License Agreement CVE-2026-6100 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-35945: fix memory leak in nghttp2_session_mem_send_internal when on_stream_close_callback returns a fatal error during send-failure handling Important TuxCare License Agreement CVE-2023-35945 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-47038: fix write past buffer end via illegal user-defined Unicode property, for almalinux9.2esu - CVE-2025-40909: clone dirhandles without fchdir, for almalinux9.2esu Important TuxCare License Agreement CVE-2023-31486 CVE-2023-31484 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-27855: fix OTP authentication replay attack via auth cache - CVE-2026-27856: fix doveadm credential timing oracle - CVE-2026-27857: fix excessive memory usage from deeply nested IMAP command lists (pre-auth ID command) Important TuxCare License Agreement CVE-2026-27855 CVE-2026-27856 CVE-2026-27857 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-1795: fix incorrect parsing of email addresses with special chars - CVE-2025-4516: fix use-after-free in unicode-escape decoder with non-strict error handler - CVE-2025-6069: fix quadratic complexity in HTMLParser special input - CVE-2025-8291: fix zip64 end-of-central-directory record validation - CVE-2025-11468: fix incorrect parsing of empty email display names - CVE-2025-15282: fix control character injection in data: URL mediatype in urllib.request.DataHandler - CVE-2024-5642: fix buffer over-read in ssl.SSLContext.set_npn_protocols with empty list Moderate TuxCare License Agreement CVE-2025-4516 CVE-2025-15282 CVE-2024-5642 CVE-2025-8291 CVE-2025-6069 CVE-2025-1795 CVE-2025-11468 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797) Resolves: RHEL-76755 Important TuxCare License Agreement CVE-2024-12797 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - rebuild on tuxcare9.6esu with newer golang version 1.25.7-1.el9_6.tuxcare.els2 to fix the following CVE: - CVE-2026-25679: fix insufficient validation of host/authority component in url.Parse - split golang BuildRequires by .el9_6 so each ELS platform pulls its own fixed golang version (el9_6 -> 1.25.7.els2, el9_2 -> 1.22.9.els6) Important TuxCare License Agreement CVE-2026-25679 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - Update to jdk-17.0.19+10 (GA) - CVE-2026-22007: Enhance crypto algorithm support - CVE-2026-22013: Improve Kerberos credentialing - CVE-2026-22016: Enhance Path Factories Redux - CVE-2026-22018: Enhance Zip file reading - CVE-2026-22021: Enhance certificate chain validation - CVE-2026-23865: FreeType: out of bounds read in tt_var_load_item_variation_store (Updated to 2.14.1) - CVE-2026-34268: Enhance key generation - CVE-2026-34282: Enhance TLS connection handling Important TuxCare License Agreement CVE-2026-34268 CVE-2026-22007 CVE-2026-34282 CVE-2026-22016 CVE-2026-23865 CVE-2026-22013 CVE-2026-22021 CVE-2026-22018 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2021-3875: fix ml_get error after search with range; clamp ea->line2 to the buffer length in get_address() so out-of-range addresses do not produce an out-of-bounds read (ex_docmd.c, upstream patch 8.2.3489) - CVE-2022-4293: fix crash when dividing the largest negative integer by -1 in num_divide(); detect the LONG_MIN / -1 case and clamp the result (typval.c, upstream patch 9.0.0913) - CVE-2023-48231: fix use-after-free in win_close() when an autocmd closes a previously-validated window; re-check window validity before setting w_closing (window.c, upstream patch 9.0.2106) - CVE-2023-48235: fix integer overflow in ex address parsing; verify lnum is positive before subtracting from LONG_MAX in get_address() and add e_line_number_out_of_range[] in src/errors.h (ex_docmd.c + errors.h, upstream patches 8.2.3659 + 9.0.2110) - CVE-2024-41957: fix use-after-free in tagstack_clear_entry(); use VIM_CLEAR to NULL pointers when freeing the tagstack on win_free (window.c, upstream patch 9.1.0647) - CVE-2024-43374: fix use-after-free in alist_add(); lock the current window across the buflist_add() autocmd window so its tagstack reference cannot be freed underneath us (arglist.c, upstream patch 9.1.0678) - CVE-2024-47814: fix use-after-free when closing a buffer; abort do_ecmd() if the new buffer is marked for deletion via b_locked or b_locked_split (ex_cmds.c, upstream patch 9.1.0764) Moderate TuxCare License Agreement CVE-2022-4293 CVE-2023-48231 CVE-2024-47814 CVE-2023-48235 CVE-2024-41957 CVE-2024-43374 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-0964: SCP path traversal via crafted filenames in ssh_scp_pull_request() allowing files to be written outside the intended directory Moderate TuxCare License Agreement CVE-2026-0964 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - gpiolib: cdev: fix uninitialised kfifo {CVE-2024-36898} - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() {CVE-2026-23315} - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check {CVE-2026-23447} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587} - Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2024-21803} - crypto: scomp - fix req->dst buffer overflow {CVE-2023-52612} - firmware_loader: Block path traversal {CVE-2024-47742} - EDAC/igen6: Avoid segmentation fault on module unload {CVE-2024-56708} - ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689} - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() {CVE-2024-53068} - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg {CVE-2024-56633} - bpf: Fix array bounds error with may_goto {CVE-2025-22087} - wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb {CVE-2024-56609} - loop: Fix use-after-free issues {CVE-2023-53111} - ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265} - net: fec: Better handle pm_runtime_get() failing in .remove() {CVE-2023-53308} - udf: Do not bother merging very long extents {CVE-2023-53506} - ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668} - binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497} - virtio-mmio: don't break lifecycle of vm_dev {CVE-2023-53515} - tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560} - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619} - gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622} - net/mlx5: Fix ECVF vports unload on shutdown flow {CVE-2025-38109} - RDMA/irdma: avoid invalid read in irdma_net_event {CVE-2025-71133} - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} - ALSA: scarlett2: Fix buffer overflow in config retrieval {CVE-2026-23078} - bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099} - svcrdma: bound check rq_pages index in inline path {CVE-2025-71068} Important TuxCare License Agreement CVE-2022-50497 CVE-2023-52612 CVE-2023-53622 CVE-2025-71082 CVE-2025-71133 CVE-2024-36898 CVE-2026-23315 CVE-2026-43284 CVE-2026-23397 CVE-2024-56633 CVE-2023-53308 CVE-2026-23078 CVE-2024-53068 CVE-2023-53515 CVE-2023-53619 CVE-2024-56708 CVE-2026-23388 CVE-2025-22087 CVE-2025-38109 CVE-2025-71068 CVE-2024-47742 CVE-2026-23447 CVE-2023-53560 CVE-2026-23099 CVE-2024-26689 CVE-2025-71093 CVE-2023-53587 CVE-2023-53265 CVE-2023-53668 CVE-2024-47701 CVE-2023-53506 CVE-2024-56609 CVE-2024-21803 CVE-2023-53111 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-0966: fix heap buffer underflow in ssh_get_hexa() on NULL or zero-length input, remotely reachable via GSSAPI authentication logging Important TuxCare License Agreement CVE-2026-0966 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-33857: fix length checks in AJP msg_get functions - CVE-2026-34032: fix ajp_msg_get_string buffer checks - CVE-2026-34059: fix ajp_parse_data message len check - CVE-2026-24072: use AP_EXPR_FLAG_RESTRICTED in htaccess - CVE-2026-29169: mod_dav_lock: use the right dav_lock_discovery - CVE-2026-33006: mod_auth_digest: use apr_crypto_equals - CVE-2026-33007: mod_authn_socache: validate URL earlier - CVE-2026-33523: scan outgoing status line for newlines and controls - CVE-2026-28780: fix ajp_msg_check_header check Important TuxCare License Agreement CVE-2026-34059 CVE-2026-29169 CVE-2026-33006 CVE-2026-24072 CVE-2026-33523 CVE-2026-33857 CVE-2026-34032 CVE-2026-28780 CVE-2026-33007 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-45615: initialize uninitialized variables passed as arguments - CVE-2024-45616: fix insufficient control of APDU response buffer length - CVE-2024-45617: check return values to avoid uninitialized variable use - CVE-2024-45618: check return values in pkcs15-init to avoid uninitialized data - CVE-2024-45620: fix incorrect access to partially-initialized buffers in pkcs15-init Low TuxCare License Agreement CVE-2024-45618 CVE-2024-45616 CVE-2024-45615 CVE-2024-45617 CVE-2024-45620 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths Moderate TuxCare License Agreement CVE-2024-46901 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2022-2257: fix out-of-bounds read in str2special() when advancing past the trailing NUL of a menu item with only a modifier (message.c, upstream patch 9.0.0009) - CVE-2022-2182: fix heap buffer overflow in parse_cmd_address() when address line 0 is used with the ";" separator (":0;/PATTERN/"); clamp cursor column via check_cursor_col() for line 0 (ex_docmd.c, upstream patch 8.2.5150) - CVE-2022-2849: return zero byte length for NUL in latin_ptr2len() and dbcs_ptr2len() so iterating past the end of a null string cannot dereference an invalid address (mbyte.c, upstream patch 9.0.0220; minimal form — only the functional changes backported) Important TuxCare License Agreement CVE-2022-2182 CVE-2022-2849 CVE-2022-2257 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-27858: managesieve: fix DoS via crafted message before authentication that caused excessive memory allocation - CVE-2025-59032: managesieve: fix crash when AUTHENTICATE command does not finish on the first call (literal SASL initial response) Important TuxCare License Agreement CVE-2026-27858 CVE-2025-59032 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - Rebuild with Go 1.25.7-1.el9_6.tuxcare.els2 to fix Go standard library CVE - CVE-2026-25679: reject invalid IPv6 host literals in net/url.Parse to prevent URL validation bypass Important TuxCare License Agreement CVE-2026-25679 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-23631: use-after-free in readSyncBulkPayload when a full resync happens while a timed-out script is still running on the replica - CVE-2026-25243: heap corruption and out-of-bounds reads in the RESTORE command deserialization path (rdb.c, sds.c, zipmap.c) Important TuxCare License Agreement CVE-2026-23631 CVE-2026-25243 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-33554: fix buffer overflows in ipmi-oem response handling for dell get-last-post-code, supermicro extra-firmware-info, and wistron read-proprietary-string subcommands Important TuxCare License Agreement CVE-2026-33554 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2024-45619: fix incorrect access of initialized parts of partially filled buffers triggered by crafted APDU responses from USB devices or smart cards Moderate TuxCare License Agreement CVE-2025-66037 CVE-2024-45619 CVE-2025-66215 CVE-2025-66038 CVE-2025-49010 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-40685: fix OOB heap write in dewrap() when expanding header ending with stray backslash Critical TuxCare License Agreement CVE-2026-40687 CVE-2026-40685 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-40686: out-of-bounds read in the GETUTF8INC macro in src/expand.c when processing malformed UTF-8 in expansion operators with utf8 enabled, potentially disclosing heap data via SMTP rejection messages. Moderate TuxCare License Agreement CVE-2026-40686 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-41142: fix integer overflow in ImageChannel::resize() pixel count computation leading to heap out-of-bounds write via the OpenEXRUtil public API Critical TuxCare License Agreement CVE-2026-41142 CVE-2026-42217 CVE-2026-42216 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-41651: fix TOCTOU race on cached transaction flags that allowed unprivileged users to install arbitrary RPM packages as root via the PackageKit D-Bus interface, leading to local privilege escalation; reject re-invocation of action methods on transactions that have left the NEW state. Important TuxCare License Agreement CVE-2026-41651 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - net: skbuff: propagate shared-frag marker through pskb_copy() - mptcp: always handle address removal under msk socket lock {CVE-2025-21875} - uprobes: Reject the shared zeropage in uprobe_write_opcode() {CVE-2025-21881} - net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error {CVE-2025-21924} - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() {CVE-2025-21744} - mptcp: fix NULL pointer in can_accept_new_subflow {CVE-2025-23145} - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock {CVE-2025-21951} - blk-cgroup: Fix class @block_class's subsystem refcount leakage {CVE-2025-21745} - net/mlx5: handle errors in mlx5_chains_create_table() {CVE-2025-21975} - USB: hub: Ignore non-compliant devices with too many configs or interfaces {CVE-2025-21776} - wifi: iwlwifi: don't warn when if there is a FW error {CVE-2025-38096} - ice: fix memory leak in aRFS after reset {CVE-2025-21981} - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel {CVE-2025-21779} - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken {CVE-2025-38099} - regulator: check that dummy regulator has been probed before using it {CVE-2025-22008} - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl {CVE-2025-22044} - drm/scheduler: signal scheduled fence when kill job {CVE-2025-38436} - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request {CVE-2025-38430} - net: decrease cached dst counters in dst_release {CVE-2025-22057} - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT {CVE-2025-38439} - net: fix NULL pointer dereference in l3mdev_l3_rcv {CVE-2025-22103} - dlm: prevent NPD when writing a positive value to event_done {CVE-2025-23131} - drm/amd/display: fix a Null pointer dereference vulnerability {CVE-2025-39705} - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree {CVE-2025-38468} - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params {CVE-2025-21941} - drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities {CVE-2025-39707} - HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948} - usb: net: sierra: check for no status endpoint {CVE-2025-38474} - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() {CVE-2025-21996} - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() {CVE-2025-38643} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets {CVE-2025-22063} - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object {CVE-2025-39851} - thermal: int340x: Add NULL check for adev {CVE-2025-23136} - Bluetooth: l2cap: Check encryption key size on incoming connection {CVE-2025-39889} - dm thin: make get_first_thin use rcu-safe list first function {CVE-2025-21664} - tracing: Add down_write(trace_event_sem) when adding trace event {CVE-2025-38539} - usbnet: Fix using smp_processor_id() in preemptible code warnings {CVE-2025-40164} - bpf: Send signals asynchronously if !preemptible {CVE-2025-21728} - ima: Fix a potential integer overflow in ima_appraise_measurement {CVE-2022-49643} - dm-stripe: fix a possible integer overflow {CVE-2025-39940} - usbnet: gl620a: fix endpoint checking in genelink_bind() {CVE-2025-21877} - fs: dlm: fix use after free in midcomms commit {CVE-2023-53629} - usbnet: fix memory leak in error case {CVE-2022-49657} - wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909} - can: j1939: j1939_send_one(): fix missing CAN header initialization {CVE-2022-49845} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - posix-clock: Fix missing timespec64 check in pc_clock_settime() {CVE-2024-50195} - net_sched: Prevent creation of classes with TC_H_ROOT {CVE-2025-21971} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902} - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow {CVE-2025-22086} - virtio/vsock: Fix accept_queue memory leak {CVE-2024-53119} - wifi: mac80211: Purge vif txq in ieee80211_do_stop() {CVE-2025-37794} - tipc: fix memory leak in tipc_link_xmit {CVE-2025-37757} - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() {CVE-2025-37824} - drm/amd/pm: Prevent division by zero {CVE-2025-37766} - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl {CVE-2024-56662} - virtiofs: add filesystem context source name check {CVE-2025-37773} - usb: xhci: Fix NULL pointer dereference on certain command aborts {CVE-2024-57981} - net_sched: sch_sfq: reject invalid perturb period {CVE-2025-38193} - Bluetooth: btrtl: Prevent potential NULL dereference {CVE-2025-37792} - trace/fgraph: Fix the warning caused by missing unregister notifier {CVE-2025-39829} - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods {CVE-2022-49024} - Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() {CVE-2024-57987} - wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion {CVE-2025-21729} - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params {CVE-2024-58012} - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write {CVE-2024-53052} - wifi: iwlwifi: mvm: avoid NULL pointer dereference {CVE-2024-58062} - page_pool: avoid infinite loop to schedule delayed worker {CVE-2025-37859} - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check {CVE-2024-57993} - bpf: Fix deadlock when freeing cgroup storage {CVE-2024-58088} - ice: ice_adapter: release xa entry on adapter allocation failure {CVE-2025-40185} - RDMA/core: Silence oversized kvmalloc() warning {CVE-2025-37867} - iommu: Clear iommu-dma ops on cleanup {CVE-2025-37877} - nfsd: clear acl_access/acl_default after releasing them {CVE-2025-21796} - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback {CVE-2024-58077} - netfilter: conntrack: clamp maximum hashtable size to INT_MAX {CVE-2025-21648} - cachestat: fix page cache statistics permission checking {CVE-2025-21691} - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy {CVE-2025-21636} - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} - block: fix resource leak in blk_register_queue() error path {CVE-2025-37980} - wifi: iwlwifi: fix debug actions order {CVE-2025-38045} - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices {CVE-2025-21649} - filemap: avoid truncating 64-bit offset to 32 bits {CVE-2025-21665} - wifi: brcmfmac: Check the return value of of_property_read_string_index() {CVE-2025-21750} - smb: client: add NULL check in automount_fullpath {CVE-2025-38208} - afs: Fix merge preference rule failure condition {CVE-2025-21672} - ipv6: mcast: add RCU protection to mld_newpack() {CVE-2025-21758} - landlock: Handle weird files {CVE-2025-21830} - bpf: Fix bpf_sk_select_reuseport() memory leak {CVE-2025-21683} - usb: gadget: core: flush gadget workqueue after device removal {CVE-2025-21838} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported {CVE-2025-22075} - vfs: fix race between evice_inodes() and find_inode()&iput() {CVE-2024-47679} - af_packet: avoid erroring out after sock_init_data() in packet_create() {CVE-2024-56606} - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() {CVE-2025-21861} - tun: Fix memory leak for detached NAPI queue. {CVE-2023-53685} - ntb_netdev: Use dev_kfree_skb_any() in interrupt context {CVE-2022-50476} - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized {CVE-2024-58068} - libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116} - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() {CVE-2025-21959} - spi: spi-imx: Add check for spi_imx_setupxfer() {CVE-2025-37801} - smb: client: Add check for next_buffer in receive_encrypted_standard() {CVE-2025-21844} - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels {CVE-2025-39745} - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() {CVE-2025-21847} - net: hinic: fix memory leak when reading function table {CVE-2022-50438} - ipv4: use RCU protection in __ip_rt_update_pmtu() {CVE-2025-21766} - usb: typec: ucsi: displayport: Fix NULL pointer access {CVE-2025-37994} - eth: alx: take rtnl_lock on resume {CVE-2022-50498} - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() {CVE-2022-50349} - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500} - RDMA/efa: Fix use of completion ctx after free {CVE-2026-31493} - bpf: avoid holding freeze_mutex during mmap operation {CVE-2025-21853} - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers {CVE-2025-21885} - ipvlan: ensure network headers are in skb linear part {CVE-2025-21891} - net: hinic: fix the issue of CMDQ memory leaks {CVE-2022-50387} - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE {CVE-2025-21833} - chardev: fix error handling in cdev_device_add() {CVE-2022-50282} - udf: Fix uninitialized array access for some pathnames {CVE-2023-53165} - net: usb: smsc95xx: Limit packet length to skb->len {CVE-2023-53062} - drm/amd/pm: fix null pointer access {CVE-2025-38705} - drm/nouveau: prime: fix ttm_bo_delayed_delete oops {CVE-2025-37765} - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. {CVE-2026-31551} - md: suspend array while updating raid_disks via sysfs {CVE-2025-71225} - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT {CVE-2026-23125} Important TuxCare License Agreement CVE-2025-21776 CVE-2023-53165 CVE-2025-21909 CVE-2025-39745 CVE-2025-37824 CVE-2024-56662 CVE-2025-21924 CVE-2025-38096 CVE-2025-38705 CVE-2025-40164 CVE-2025-21971 CVE-2024-47679 CVE-2025-37859 CVE-2022-50476 CVE-2025-21750 CVE-2025-21683 CVE-2025-21766 CVE-2025-71225 CVE-2025-21881 CVE-2022-50349 CVE-2025-22044 CVE-2025-22057 CVE-2025-39889 CVE-2024-40954 CVE-2025-21853 CVE-2025-21830 CVE-2025-40185 CVE-2024-58088 CVE-2024-53119 CVE-2025-37765 CVE-2025-22008 CVE-2024-58068 CVE-2024-58077 CVE-2025-21728 CVE-2025-21649 CVE-2025-21796 CVE-2025-21664 CVE-2025-38208 CVE-2024-56606 CVE-2022-49643 CVE-2024-57987 CVE-2025-21744 CVE-2025-21691 CVE-2025-21941 CVE-2025-23136 CVE-2025-39705 CVE-2025-37773 CVE-2025-38643 CVE-2026-23125 CVE-2025-21636 CVE-2025-21745 CVE-2025-39940 CVE-2025-21875 CVE-2023-53685 CVE-2025-38436 CVE-2025-38474 CVE-2024-58062 CVE-2024-39494 CVE-2025-37766 CVE-2025-37801 CVE-2025-38045 CVE-2025-38430 CVE-2025-71116 CVE-2025-22103 CVE-2025-21838 CVE-2025-38439 CVE-2025-21981 CVE-2025-21975 CVE-2025-37980 CVE-2022-50387 CVE-2025-23131 CVE-2022-49657 CVE-2025-22075 CVE-2025-23145 CVE-2025-37794 CVE-2026-31500 CVE-2025-21948 CVE-2025-39707 CVE-2025-21672 CVE-2025-38193 CVE-2025-39829 CVE-2025-37792 CVE-2025-21891 CVE-2025-21758 CVE-2022-50498 CVE-2025-21847 CVE-2022-49024 CVE-2025-21959 CVE-2025-39902 CVE-2025-38468 CVE-2025-39851 CVE-2022-49845 CVE-2025-37867 CVE-2024-58012 CVE-2025-21885 CVE-2025-21665 CVE-2023-53629 CVE-2026-31551 CVE-2025-38539 CVE-2026-31493 CVE-2025-21951 CVE-2025-38099 CVE-2024-57993 CVE-2025-37877 CVE-2025-21877 CVE-2025-21833 CVE-2026-23076 CVE-2026-46300 CVE-2024-53052 CVE-2023-53062 CVE-2025-21729 CVE-2025-37994 CVE-2025-37757 CVE-2022-50282 CVE-2024-50195 CVE-2025-21996 CVE-2025-21844 CVE-2025-21861 CVE-2025-21648 CVE-2025-22086 CVE-2022-50438 CVE-2025-22063 CVE-2025-21779 CVE-2024-57981 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2023-39804: fix crash on PAX archive with malformed extended header attributes in locate_handler and xattr_decoder Low TuxCare License Agreement CVE-2023-39804 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-6100: fix possible use-after-free in bz2.BZ2Decompressor and lzma.LZMADecompressor by clearing dangling next_in input pointer on the MemoryError error path Critical TuxCare License Agreement CVE-2026-6100 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-32282: fix TOCTOU race in os.Root.Chmod on Linux that allowed symlink-based escapes from the restricted root by switching to fchmodat2 with /proc/self/fd fallback Moderate TuxCare License Agreement CVE-2026-32282 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-34982: fix vim modeline sandbox bypass via complete/guitabtooltip/printheader options and mapset() Important TuxCare License Agreement CVE-2026-34982 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - Fix CVE-2025-0620: smbd doesn't pick up group membership changes when re-authenticating an expired SMB session. Moderate TuxCare License Agreement CVE-2025-0620 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-4153: fix heap-based buffer overflow in PSP file parser by computing proper line_width for bit depths 1 and 4 with small widths - CVE-2026-4154: fix integer overflow and buffer overflow in XPM file parser by adding GIMP_MAX_IMAGE_SIZE bounds checks and using g_try_new Important TuxCare License Agreement CVE-2026-4150 CVE-2026-4153 CVE-2026-4154 CVE-2026-4152 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-5545: wrong reuse of HTTP Negotiate connection; only allow an existing connection to be reused and "upgraded" to NTLM when neither NTLM nor Negotiate authentication is in flight on it Moderate TuxCare License Agreement CVE-2026-5545 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-60753: denial of service in bsdtar -s substitution when the regular expression matches a zero-length string, causing an infinite loop in apply_substitution Moderate TuxCare License Agreement CVE-2025-60753 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-48708: fix argument sanitization to redact values supplied with '#' separator Low TuxCare License Agreement CVE-2025-48708 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-34757: use-after-free in png_set_PLTE, png_set_tRNS, png_set_hIST, png_set_text, png_set_sPLT and png_set_unknown_chunks when the caller passes the pointer returned by the corresponding getter back to the setter Moderate TuxCare License Agreement CVE-2026-34757 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - ptrace: require CAP_SYS_PTRACE when task has no mm - net: udp_offload: propagate SKBFL_SHARED_FRAG in skb_gro_receive_list {CVE-2026-46300} Important TuxCare License Agreement CVE-2026-46333 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2025-32728: fix logic error in DisableForwarding option Low TuxCare License Agreement CVE-2025-32728 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - net: skbuff: propagate shared-frag marker through skb_gro_receive + skb_shift {CVE-2026-46300} Important TuxCare License Agreement CVE-2026-46300 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 TuxCare 9.6 - CVE-2026-2708: reject duplicate Content-Length headers with different values to prevent HTTP request smuggling per RFC 9110 section 7.7 Moderate TuxCare License Agreement CVE-2026-2708 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.6 /etc/tuxcare-release TuxCare Enterprise Support for .* release 9\.6 1 gnutls gnutls-c++ gnutls-dane gnutls-devel gnutls-utils openssl openssl-devel openssl-libs openssl-perl iperf3 iperf3-devel php php-bcmath php-cli php-common php-dba php-dbg php-devel php-embedded php-enchant php-ffi php-fpm php-gd php-gmp php-intl php-ldap php-mbstring php-mysqlnd php-odbc php-opcache php-pdo php-pgsql php-process php-snmp php-soap php-xml squid binutils binutils-devel binutils-gold cross-binutils-aarch64 cross-binutils-ppc64le cross-binutils-s390x libssh libssh-config libssh-devel tomcat tomcat-admin-webapps tomcat-docs-webapp tomcat-el-3.0-api tomcat-jsp-2.3-api tomcat-lib tomcat-servlet-4.0-api tomcat-webapps poppler poppler-cpp poppler-cpp-devel poppler-devel poppler-glib poppler-glib-devel poppler-glib-doc poppler-qt5 poppler-qt5-devel poppler-utils libtiff libtiff-devel libtiff-static libtiff-tools libxml2 libxml2-devel libxml2-static python3-libxml2 libxslt libxslt-devel elfutils elfutils-debuginfod elfutils-debuginfod-client elfutils-debuginfod-client-devel elfutils-default-yama-scope elfutils-devel elfutils-libelf elfutils-libelf-devel elfutils-libs jasper jasper-devel jasper-libs jasper-utils libpng libpng-devel libpng-static libpng-tools lasso lasso-devel perl-lasso python3-lasso haproxy expat expat-devel expat-static gegl04 gegl04-devel gegl04-devel-docs gegl04-tools buildah buildah-tests libipa_hbac libipa_hbac-devel libsss_autofs libsss_certmap libsss_certmap-devel libsss_idmap libsss_idmap-devel libsss_nss_idmap libsss_nss_idmap-devel libsss_simpleifp libsss_simpleifp-devel libsss_sudo python3-libipa_hbac python3-libsss_nss_idmap python3-sss python3-sss-murmur python3-sssdconfig sssd sssd-ad sssd-client sssd-common sssd-common-pac sssd-dbus sssd-idp sssd-ipa sssd-kcm sssd-krb5 sssd-krb5-common sssd-ldap sssd-nfs-idmap sssd-passkey sssd-polkit-rules sssd-proxy sssd-tools sssd-winbind-idmap exiv2 exiv2-devel exiv2-doc exiv2-libs podman podman-docker podman-plugins podman-remote podman-tests grafana grafana-selinux go-toolset golang golang-bin golang-docs golang-misc golang-race golang-src golang-tests bsdcat bsdcpio bsdtar libarchive libarchive-devel delve go-filesystem go-rpm-macros go-rpm-templates go-srpm-macros wireshark wireshark-cli wireshark-devel kernel kernel-abi-stablelists kernel-core kernel-cross-headers kernel-debug kernel-debug-core kernel-debug-devel kernel-debug-devel-matched kernel-debug-modules kernel-debug-modules-core kernel-debug-modules-extra kernel-debug-modules-internal kernel-debug-modules-partner kernel-debug-uki-virt kernel-debug-uki-virt-addons kernel-devel kernel-devel-matched kernel-doc kernel-headers kernel-ipaclones-internal kernel-modules kernel-modules-core kernel-modules-extra kernel-modules-internal kernel-modules-partner kernel-rt kernel-rt-core kernel-rt-debug kernel-rt-debug-core kernel-rt-debug-devel kernel-rt-debug-devel-matched kernel-rt-debug-kvm kernel-rt-debug-modules kernel-rt-debug-modules-core kernel-rt-debug-modules-extra kernel-rt-debug-modules-internal kernel-rt-debug-modules-partner kernel-rt-devel kernel-rt-devel-matched kernel-rt-kvm kernel-rt-modules kernel-rt-modules-core kernel-rt-modules-extra kernel-rt-modules-internal kernel-rt-modules-partner kernel-selftests-internal kernel-tools kernel-tools-libs kernel-tools-libs-devel kernel-uki-virt kernel-uki-virt-addons libperf libperf-devel perf python3-perf rtla rv qt5-qt3d qt5-qt3d-devel qt5-qt3d-examples qt5-qt3d-tests iwl100-firmware iwl1000-firmware iwl105-firmware iwl135-firmware iwl2000-firmware iwl2030-firmware iwl3160-firmware iwl3945-firmware iwl4965-firmware iwl5000-firmware iwl5150-firmware iwl6000-firmware iwl6000g2a-firmware iwl6000g2b-firmware iwl6050-firmware iwl7260-firmware libertas-sd8686-firmware libertas-sd8787-firmware libertas-usb8388-firmware libertas-usb8388-olpc-firmware linux-firmware linux-firmware-whence liquidio-firmware netronome-firmware webkit2gtk3 webkit2gtk3-devel webkit2gtk3-jsc webkit2gtk3-jsc-devel git-lfs gimp gimp-devel gimp-devel-tools gimp-libs httpd httpd-core httpd-devel httpd-filesystem httpd-manual httpd-tools mod_ldap mod_lua mod_proxy_html mod_session mod_ssl curl curl-minimal libcurl libcurl-devel libcurl-minimal vim-X11 vim-common vim-enhanced vim-filesystem vim-minimal mod_md openssh openssh-askpass openssh-clients openssh-keycat openssh-server openssh-sk-dummy pam_ssh_agent_auth ruby ruby-default-gems ruby-devel ruby-doc ruby-libs rubygem-bigdecimal rubygem-bundler rubygem-io-console rubygem-irb rubygem-json rubygem-minitest rubygem-power_assert rubygem-psych rubygem-rake rubygem-rbs rubygem-rdoc rubygem-rexml rubygem-rss rubygem-test-unit rubygem-typeprof rubygems rubygems-devel mysql mysql-common mysql-devel mysql-errmsg mysql-libs mysql-server mysql-test python3.11 python3.11-debug python3.11-devel python3.11-idle python3.11-libs python3.11-test python3.11-tkinter libsoup libsoup-devel libsoup-doc cups-filters cups-filters-devel cups-filters-libs cups cups-client cups-devel cups-filesystem cups-ipptool cups-libs cups-lpd cups-printerapp libpq libpq-devel pki-servlet-4.0-api pki-servlet-engine postgresql postgresql-contrib postgresql-docs postgresql-plperl postgresql-plpython3 postgresql-pltcl postgresql-private-devel postgresql-private-libs postgresql-server postgresql-server-devel postgresql-static postgresql-test postgresql-test-rpm-macros postgresql-upgrade postgresql-upgrade-devel python-unversioned-command python3 python3-debug python3-devel python3-idle python3-libs python3-test python3-tkinter mariadb mariadb-backup mariadb-common mariadb-devel mariadb-embedded mariadb-embedded-devel mariadb-errmsg mariadb-gssapi-server mariadb-oqgraph-engine mariadb-pam mariadb-server mariadb-server-galera mariadb-server-utils mariadb-test gnupg2 gnupg2-smime gpsd-minimal gpsd-minimal-clients tar net-snmp net-snmp-agent-libs net-snmp-devel net-snmp-gui net-snmp-libs net-snmp-perl net-snmp-utils python3-net-snmp glib2 glib2-devel glib2-doc glib2-static glib2-tests python3.11-urllib3 java-17-openjdk java-17-openjdk-demo java-17-openjdk-demo-fastdebug java-17-openjdk-demo-slowdebug java-17-openjdk-devel java-17-openjdk-devel-fastdebug java-17-openjdk-devel-slowdebug java-17-openjdk-fastdebug java-17-openjdk-headless java-17-openjdk-headless-fastdebug java-17-openjdk-headless-slowdebug java-17-openjdk-javadoc java-17-openjdk-javadoc-zip java-17-openjdk-jmods java-17-openjdk-jmods-fastdebug java-17-openjdk-jmods-slowdebug java-17-openjdk-slowdebug java-17-openjdk-src java-17-openjdk-src-fastdebug java-17-openjdk-src-slowdebug java-17-openjdk-static-libs java-17-openjdk-static-libs-fastdebug java-17-openjdk-static-libs-slowdebug java-1.8.0-openjdk java-1.8.0-openjdk-demo java-1.8.0-openjdk-demo-fastdebug java-1.8.0-openjdk-demo-slowdebug java-1.8.0-openjdk-devel java-1.8.0-openjdk-devel-fastdebug java-1.8.0-openjdk-devel-slowdebug java-1.8.0-openjdk-fastdebug java-1.8.0-openjdk-headless java-1.8.0-openjdk-headless-fastdebug java-1.8.0-openjdk-headless-slowdebug java-1.8.0-openjdk-javadoc java-1.8.0-openjdk-javadoc-zip java-1.8.0-openjdk-slowdebug java-1.8.0-openjdk-src java-1.8.0-openjdk-src-fastdebug java-1.8.0-openjdk-src-slowdebug nodejs nodejs-devel nodejs-docs nodejs-full-i18n nodejs-libs npm v8-devel brotli brotli-devel libbrotli python3-brotli ImageMagick ImageMagick-c++ ImageMagick-c++-devel ImageMagick-devel ImageMagick-djvu ImageMagick-doc ImageMagick-libs ImageMagick-perl java-21-openjdk java-21-openjdk-demo java-21-openjdk-demo-fastdebug java-21-openjdk-demo-slowdebug java-21-openjdk-devel java-21-openjdk-devel-fastdebug java-21-openjdk-devel-slowdebug java-21-openjdk-fastdebug java-21-openjdk-headless java-21-openjdk-headless-fastdebug java-21-openjdk-headless-slowdebug java-21-openjdk-javadoc java-21-openjdk-javadoc-zip java-21-openjdk-jmods java-21-openjdk-jmods-fastdebug java-21-openjdk-jmods-slowdebug java-21-openjdk-slowdebug java-21-openjdk-src java-21-openjdk-src-fastdebug java-21-openjdk-src-slowdebug java-21-openjdk-static-libs java-21-openjdk-static-libs-fastdebug java-21-openjdk-static-libs-slowdebug grub2-common grub2-efi-aa64-modules grub2-efi-x64 grub2-efi-x64-cdboot grub2-efi-x64-modules grub2-emu grub2-emu-modules grub2-pc grub2-pc-modules grub2-tools grub2-tools-efi grub2-tools-extra grub2-tools-minimal compat-libpthread-nonshared glibc glibc-all-langpacks glibc-benchtests glibc-common glibc-devel glibc-doc glibc-gconv-extra glibc-headers glibc-langpack-aa glibc-langpack-af glibc-langpack-agr glibc-langpack-ak glibc-langpack-am glibc-langpack-an glibc-langpack-anp glibc-langpack-ar glibc-langpack-as glibc-langpack-ast glibc-langpack-ayc glibc-langpack-az glibc-langpack-be glibc-langpack-bem glibc-langpack-ber glibc-langpack-bg glibc-langpack-bhb glibc-langpack-bho glibc-langpack-bi glibc-langpack-bn glibc-langpack-bo glibc-langpack-br glibc-langpack-brx glibc-langpack-bs glibc-langpack-byn glibc-langpack-ca glibc-langpack-ce glibc-langpack-chr glibc-langpack-ckb glibc-langpack-cmn glibc-langpack-crh glibc-langpack-cs glibc-langpack-csb glibc-langpack-cv glibc-langpack-cy glibc-langpack-da glibc-langpack-de glibc-langpack-doi glibc-langpack-dsb glibc-langpack-dv glibc-langpack-dz glibc-langpack-el glibc-langpack-en glibc-langpack-eo glibc-langpack-es glibc-langpack-et glibc-langpack-eu glibc-langpack-fa glibc-langpack-ff glibc-langpack-fi glibc-langpack-fil glibc-langpack-fo glibc-langpack-fr glibc-langpack-fur glibc-langpack-fy glibc-langpack-ga glibc-langpack-gd glibc-langpack-gez glibc-langpack-gl glibc-langpack-gu glibc-langpack-gv glibc-langpack-ha glibc-langpack-hak glibc-langpack-he glibc-langpack-hi glibc-langpack-hif glibc-langpack-hne glibc-langpack-hr glibc-langpack-hsb glibc-langpack-ht glibc-langpack-hu glibc-langpack-hy glibc-langpack-ia glibc-langpack-id glibc-langpack-ig glibc-langpack-ik glibc-langpack-is glibc-langpack-it glibc-langpack-iu glibc-langpack-ja glibc-langpack-ka glibc-langpack-kab glibc-langpack-kk glibc-langpack-kl glibc-langpack-km glibc-langpack-kn glibc-langpack-ko glibc-langpack-kok glibc-langpack-ks glibc-langpack-ku glibc-langpack-kw glibc-langpack-ky glibc-langpack-lb glibc-langpack-lg glibc-langpack-li glibc-langpack-lij glibc-langpack-ln glibc-langpack-lo glibc-langpack-lt glibc-langpack-lv glibc-langpack-lzh glibc-langpack-mag glibc-langpack-mai glibc-langpack-mfe glibc-langpack-mg glibc-langpack-mhr glibc-langpack-mi glibc-langpack-miq glibc-langpack-mjw glibc-langpack-mk glibc-langpack-ml glibc-langpack-mn glibc-langpack-mni glibc-langpack-mnw glibc-langpack-mr glibc-langpack-ms glibc-langpack-mt glibc-langpack-my glibc-langpack-nan glibc-langpack-nb glibc-langpack-nds glibc-langpack-ne glibc-langpack-nhn glibc-langpack-niu glibc-langpack-nl glibc-langpack-nn glibc-langpack-nr glibc-langpack-nso glibc-langpack-oc glibc-langpack-om glibc-langpack-or glibc-langpack-os glibc-langpack-pa glibc-langpack-pap glibc-langpack-pl glibc-langpack-ps glibc-langpack-pt glibc-langpack-quz glibc-langpack-raj glibc-langpack-ro glibc-langpack-ru glibc-langpack-rw glibc-langpack-sa glibc-langpack-sah glibc-langpack-sat glibc-langpack-sc glibc-langpack-sd glibc-langpack-se glibc-langpack-sgs glibc-langpack-shn glibc-langpack-shs glibc-langpack-si glibc-langpack-sid glibc-langpack-sk glibc-langpack-sl glibc-langpack-sm glibc-langpack-so glibc-langpack-sq glibc-langpack-sr glibc-langpack-ss glibc-langpack-st glibc-langpack-sv glibc-langpack-sw glibc-langpack-szl glibc-langpack-ta glibc-langpack-tcy glibc-langpack-te glibc-langpack-tg glibc-langpack-th glibc-langpack-the glibc-langpack-ti glibc-langpack-tig glibc-langpack-tk glibc-langpack-tl glibc-langpack-tn glibc-langpack-to glibc-langpack-tpi glibc-langpack-tr glibc-langpack-ts glibc-langpack-tt glibc-langpack-ug glibc-langpack-uk glibc-langpack-unm glibc-langpack-ur glibc-langpack-uz glibc-langpack-ve glibc-langpack-vi glibc-langpack-wa glibc-langpack-wae glibc-langpack-wal glibc-langpack-wo glibc-langpack-xh glibc-langpack-yi glibc-langpack-yo glibc-langpack-yue glibc-langpack-yuw glibc-langpack-zh glibc-langpack-zu glibc-locale-source glibc-minimal-langpack glibc-nss-devel glibc-static glibc-utils libnsl nscd nss_db nss_hesiod sysroot-aarch64-el9-glibc sysroot-i386-el9-glibc sysroot-x86_64-el9-glibc grafana-pcp libpng15 protobuf protobuf-compiler protobuf-devel protobuf-emacs protobuf-lite protobuf-lite-devel protobuf-lite-static protobuf-static protobuf-vim python3-protobuf edk2-aarch64 edk2-ovmf edk2-tools edk2-tools-doc munge munge-devel munge-libs butane butane-redistributable 389-ds-base 389-ds-base-devel 389-ds-base-libs 389-ds-base-snmp python3-lib389 containernetworking-plugins runc skopeo skopeo-tests avahi avahi-autoipd avahi-compat-howl avahi-compat-howl-devel avahi-compat-libdns_sd avahi-compat-libdns_sd-devel avahi-devel avahi-dnsconfd avahi-glib avahi-glib-devel avahi-gobject avahi-gobject-devel avahi-libs avahi-tools avahi-ui avahi-ui-devel avahi-ui-gtk3 avahi-ui-tools libnfsidmap libnfsidmap-devel nfs-stats-utils nfs-utils nfs-utils-coreos nfsv4-client-utils nginx nginx-all-modules nginx-core nginx-filesystem nginx-mod-devel nginx-mod-http-image-filter nginx-mod-http-perl nginx-mod-http-xslt-filter nginx-mod-mail nginx-mod-stream osbuild-composer osbuild-composer-core osbuild-composer-tests osbuild-composer-worker openexr openexr-devel openexr-libs libvpx libvpx-devel libvpx-utils compat-openssl11 capstone capstone-devel capstone-java python3-capstone ghostscript ghostscript-doc ghostscript-gtk ghostscript-tools-dvipdf ghostscript-tools-fonts ghostscript-tools-printing ghostscript-x11 libgs libgs-devel opencryptoki opencryptoki-ccatok opencryptoki-devel opencryptoki-icsftok opencryptoki-libs opencryptoki-swtok augeas augeas-bash-completion augeas-devel augeas-libs augeas-static rsync rsync-daemon rsync-rrsync bind bind-chroot bind-devel bind-dnssec-doc bind-dnssec-utils bind-doc bind-libs bind-license bind-utils python3-bind nbdkit nbdkit-bash-completion nbdkit-basic-filters nbdkit-basic-plugins nbdkit-blkio-plugin nbdkit-curl-plugin nbdkit-devel nbdkit-example-plugins nbdkit-gzip-filter nbdkit-linuxdisk-plugin nbdkit-nbd-plugin nbdkit-python-plugin nbdkit-selinux nbdkit-server nbdkit-srpm-macros nbdkit-ssh-plugin nbdkit-stats-filter nbdkit-tar-filter nbdkit-tmpdisk-plugin nbdkit-vddk-plugin nbdkit-xz-filter redis redis-devel redis-doc libtasn1 libtasn1-devel libtasn1-tools gstreamer1-plugins-base gstreamer1-plugins-base-devel gstreamer1-plugins-base-tools crun rhel-net-naming-sysattrs systemd systemd-boot-unsigned systemd-container systemd-devel systemd-journal-remote systemd-libs systemd-oomd systemd-pam systemd-resolved systemd-rpm-macros systemd-standalone-sysusers systemd-standalone-tmpfiles systemd-udev systemd-ukify gstreamer1-plugins-good gstreamer1-plugins-good-gtk gstreamer1-plugins-good-qt gstreamer1 gstreamer1-devel giflib giflib-devel giflib-utils graphviz graphviz-devel graphviz-doc graphviz-gd graphviz-graphs graphviz-java graphviz-lua graphviz-ocaml graphviz-perl graphviz-python3 graphviz-ruby graphviz-tcl libexif libexif-devel libexif-doc gawk gawk-all-langpacks gawk-devel gawk-doc tigervnc tigervnc-icons tigervnc-license tigervnc-selinux tigervnc-server tigervnc-server-minimal tigervnc-server-module java-11-openjdk java-11-openjdk-demo java-11-openjdk-devel java-11-openjdk-headless java-11-openjdk-javadoc java-11-openjdk-javadoc-zip java-11-openjdk-jmods java-11-openjdk-src java-11-openjdk-static-libs perl-XML-Parser cockpit cockpit-bridge cockpit-doc cockpit-packagekit cockpit-storaged cockpit-system cockpit-ws plexus-utils plexus-utils-javadoc pcre2 pcre2-devel pcre2-static pcre2-syntax pcre2-tools pcre2-utf16 pcre2-utf32 taglib taglib-devel flatpak flatpak-devel flatpak-libs flatpak-selinux flatpak-session-helper flatpak-tests gstreamer1-plugins-ugly-free corosync corosync-vqsim corosynclib corosynclib-devel jq jq-devel gdk-pixbuf2 gdk-pixbuf2-devel gdk-pixbuf2-modules gdk-pixbuf2-tests LibRaw LibRaw-devel LibRaw-samples LibRaw-static gstreamer1-plugins-bad-free gstreamer1-plugins-bad-free-devel gstreamer1-plugins-bad-free-libs libnghttp2 libnghttp2-devel nghttp2 xorg-x11-server-Xwayland xorg-x11-server-Xwayland-devel mod_http2 sudo sudo-devel sudo-python-plugin libcap libcap-devel libcap-static unzip perl perl-Attribute-Handlers perl-AutoLoader perl-AutoSplit perl-B perl-Benchmark perl-Class-Struct perl-Config-Extensions perl-DBM_Filter perl-Devel-Peek perl-Devel-SelfStubber perl-DirHandle perl-Dumpvalue perl-DynaLoader perl-English perl-Errno perl-ExtUtils-Constant perl-ExtUtils-Embed perl-ExtUtils-Miniperl perl-Fcntl perl-File-Basename perl-File-Compare perl-File-Copy perl-File-DosGlob perl-File-Find perl-File-stat perl-FileCache perl-FileHandle perl-FindBin perl-GDBM_File perl-Getopt-Std perl-Hash-Util perl-Hash-Util-FieldHash perl-I18N-Collate perl-I18N-LangTags perl-I18N-Langinfo perl-IO perl-IPC-Open3 perl-Locale-Maketext-Simple perl-Math-Complex perl-Memoize perl-Module-Loaded perl-NDBM_File perl-NEXT perl-Net perl-ODBM_File perl-Opcode perl-POSIX perl-Pod-Functions perl-Pod-Html perl-Safe perl-Search-Dict perl-SelectSaver perl-SelfLoader perl-Symbol perl-Sys-Hostname perl-Term-Complete perl-Term-ReadLine perl-Test perl-Text-Abbrev perl-Thread perl-Thread-Semaphore perl-Tie perl-Tie-File perl-Tie-Memoize perl-Time perl-Time-Piece perl-Unicode-UCD perl-User-pwent perl-autouse perl-base perl-blib perl-debugger perl-deprecate perl-devel perl-diagnostics perl-doc perl-encoding-warnings perl-fields perl-filetest perl-if perl-interpreter perl-less perl-lib perl-libnetcfg perl-libs perl-locale perl-macros perl-meta-notation perl-mro perl-open perl-overload perl-overloading perl-ph perl-sigtrap perl-sort perl-subs perl-tests perl-utils perl-vars perl-vmsish dovecot dovecot-devel dovecot-mysql dovecot-pgsql dovecot-pigeonhole opensc mod_dav_svn python3-subversion subversion subversion-devel subversion-gnome subversion-javahl subversion-libs subversion-perl subversion-ruby subversion-tools freeipmi freeipmi-bmc-watchdog freeipmi-devel freeipmi-ipmidetectd freeipmi-ipmiseld exim exim-greylist exim-mon exim-mysql exim-pgsql PackageKit PackageKit-command-not-found PackageKit-cron PackageKit-glib PackageKit-glib-devel PackageKit-gstreamer-plugin PackageKit-gtk3-module ctdb ldb-tools libldb libldb-devel libnetapi libnetapi-devel libsmbclient libsmbclient-devel libwbclient libwbclient-devel python3-ldb python3-samba python3-samba-dc python3-samba-test samba samba-client samba-client-libs samba-common samba-common-libs samba-common-tools samba-dc-libs samba-dcerpc samba-devel samba-gpupdate samba-krb5-printing samba-ldb-ldap-modules samba-libs samba-pidl samba-test samba-test-libs samba-tools samba-usershares samba-vfs-iouring samba-winbind samba-winbind-clients samba-winbind-krb5-locator samba-winbind-modules samba-winexe i686|x86_64 0:3.8.3-6.el9_6.tuxcare.2.els2 D36CB86CB86B3716 d07bf2a08d50eb66 x86_64 0:3.8.3-6.el9_6.tuxcare.2.els2 x86_64 1:3.2.2-6.el9_6.1.tuxcare.6.els1 i686|x86_64 1:3.2.2-6.el9_6.1.tuxcare.6.els1 i686|x86_64 0:3.9-14.el9.tuxcare.els1 x86_64 0:3.9-14.el9.tuxcare.els1 x86_64 0:8.0.30-3.el9_6.tuxcare.els1 x86_64 7:5.5-19.el9_6.1.tuxcare.els1 i686|x86_64 0:2.35.2-63.el9.tuxcare.els1 x86_64 0:2.35.2-63.el9.tuxcare.els1 i686|x86_64 0:0.10.4-15.el9_6.tuxcare.els1 0:0.10.4-15.el9_6.tuxcare.els1 1:9.0.87-3.el9_6.3.tuxcare.els1 i686|x86_64 0:21.01.0-21.el9.tuxcare.els1 0:21.01.0-21.el9.tuxcare.els1 x86_64 0:21.01.0-21.el9.tuxcare.els1 i686|x86_64 0:4.4.0-13.el9_6.2.tuxcare.els1 x86_64 0:4.4.0-13.el9_6.2.tuxcare.els1 i686|x86_64 0:2.9.13-12.el9_6.tuxcare.els1 x86_64 0:2.9.13-12.el9_6.tuxcare.els1 i686|x86_64 0:1.1.34-13.el9_6.tuxcare.els1 x86_64 0:0.192-6.el9_6.alma.1.tuxcare.els1 i686|x86_64 0:0.192-6.el9_6.alma.1.tuxcare.els1 0:0.192-6.el9_6.alma.1.tuxcare.els1 x86_64 0:2.0.28-3.el9.tuxcare.els4 i686|x86_64 0:2.0.28-3.el9.tuxcare.els4 i686|x86_64 2:1.6.37-12.el9.tuxcare.els1 x86_64 2:1.6.37-12.el9.tuxcare.els1 i686|x86_64 0:2.7.0-11.el9.tuxcare.els1 x86_64 0:2.7.0-11.el9.tuxcare.els1 x86_64 0:2.4.22-4.el9.tuxcare.els1 i686|x86_64 0:4.4.0-13.el9_6.2.tuxcare.els2 x86_64 0:4.4.0-13.el9_6.2.tuxcare.els2 i686|x86_64 0:0.10.4-15.el9_6.tuxcare.els2 0:0.10.4-15.el9_6.tuxcare.els2 i686|x86_64 0:2.5.0-5.el9_6.tuxcare.els1 x86_64 0:2.5.0-5.el9_6.tuxcare.els1 i686|x86_64 0:0.4.34-3.el9.tuxcare.els1 x86_64 0:0.4.34-3.el9.tuxcare.els1 x86_64 2:1.39.6-1.el9_6.tuxcare.els3 i686|x86_64 0:2.9.6-4.el9_6.2.tuxcare.els1 x86_64 0:2.9.6-4.el9_6.2.tuxcare.els1 0:2.9.6-4.el9_6.2.tuxcare.els1 x86_64 0:0.27.5-2.el9.tuxcare.els1 i686|x86_64 0:0.27.5-2.el9.tuxcare.els1 0:0.27.5-2.el9.tuxcare.els1 x86_64 5:5.4.0-13.el9_6.tuxcare.els1 5:5.4.0-13.el9_6.tuxcare.els1 x86_64 0:10.2.6-15.el9_6.tuxcare.els1 x86_64 0:1.25.3-1.el9_6.tuxcare.els1 0:1.25.3-1.el9_6.tuxcare.els1 x86_64 0:3.5.3-6.el9_6.tuxcare.els1 i686|x86_64 0:3.5.3-6.el9_6.tuxcare.els1 x86_64 0:1.24.1-2.el9_6.tuxcare.els1 x86_64 0:3.6.0-10.el9_6.tuxcare.els1 0:3.6.0-10.el9_6.tuxcare.els1 x86_64 1:3.4.10-7.el9_6.tuxcare.els1 i686|x86_64 1:3.4.10-7.el9_6.tuxcare.els1 (^5\.14\.0\-570\.(\d{3,}|[7-9]\d|6[2-9])(?:\.(\d{2,}|[1-9]))?\.el9_6\.tuxcare(\.(\d{2,}|[1-9]))(\.els(\d{2,}|[1-9]))?\.(x86_64|i686)$) x86_64 0:5.14.0-570.62.1.el9_6.tuxcare.1.els1 0:5.14.0-570.62.1.el9_6.tuxcare.1.els1 x86_64 0:0.27.5-2.el9.tuxcare.els2 i686|x86_64 0:0.27.5-2.el9.tuxcare.els2 0:0.27.5-2.el9.tuxcare.els2 x86_64 0:0.192-6.el9_6.alma.1.tuxcare.els2 i686|x86_64 0:0.192-6.el9_6.alma.1.tuxcare.els2 0:0.192-6.el9_6.alma.1.tuxcare.els2 i686|x86_64 0:5.15.9-2.el9_6.1.tuxcare.els1 x86_64 0:5.15.9-2.el9_6.1.tuxcare.els1 i686|x86_64 0:3.8.3-6.el9_6.tuxcare.2.els4 x86_64 0:3.8.3-6.el9_6.tuxcare.2.els4 0:39.31.5.1-151.5.el9_6.tuxcare.els1 1:39.31.5.1-151.5.el9_6.tuxcare.els1 0:18.168.6.1-151.5.el9_6.tuxcare.els1 1:25.30.13.0-151.5.el9_6.tuxcare.els1 0:15.32.2.9-151.5.el9_6.tuxcare.els1 0:228.61.2.24-151.5.el9_6.tuxcare.els1 0:8.83.5.1_1-151.5.el9_6.tuxcare.els1 0:8.24.2.2-151.5.el9_6.tuxcare.els1 0:9.221.4.1-151.5.el9_6.tuxcare.els1 0:41.28.5.1-151.5.el9_6.tuxcare.els1 0:20251008-151.5.el9_6.tuxcare.els1 2:20251008-151.5.el9_6.tuxcare.els1 i686|x86_64 0:2.50.3-1.el9_6.tuxcare.els1 i686|x86_64 0:2.35.2-63.el9.tuxcare.els2 x86_64 0:2.35.2-63.el9.tuxcare.els2 x86_64 0:3.6.1-2.el9_6.tuxcare.els1 x86_64 2:2.99.8-4.el9_6.2.tuxcare.els2 i686|x86_64 2:2.99.8-4.el9_6.2.tuxcare.els2 x86_64 0:2.4.62-4.el9_6.4.tuxcare.els1 0:2.4.62-4.el9_6.4.tuxcare.els1 x86_64 1:2.4.62-4.el9_6.4.tuxcare.els1 x86_64 0:7.76.1-31.el9_6.1.tuxcare.els1 i686|x86_64 0:7.76.1-31.el9_6.1.tuxcare.els1 i686|x86_64 0:2.50.4-1.el9_6.tuxcare.els1 1:9.0.87-3.el9_6.3.tuxcare.els2 i686|x86_64 0:2.9.13-12.el9_6.tuxcare.els2 x86_64 0:2.9.13-12.el9_6.tuxcare.els2 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els1 2:8.2.2637-22.el9_6.1.tuxcare.els1 x86_64 0:7.76.1-31.el9_6.1.tuxcare.els2 i686|x86_64 0:7.76.1-31.el9_6.1.tuxcare.els2 x86_64 1:2.4.26-1.el9.tuxcare.els1 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els2 2:8.2.2637-22.el9_6.1.tuxcare.els2 x86_64 0:8.7p1-45.el9.tuxcare.els1 x86_64 0:0.10.4-5.45.el9.tuxcare.els1 x86_64 0:8.0.30-3.el9_6.tuxcare.els2 i686|x86_64 0:3.0.7-165.el9_5.tuxcare.els1 0:3.0.7-165.el9_5.tuxcare.els1 x86_64 0:3.0.0-165.el9_5.tuxcare.els1 0:2.2.33-165.el9_5.tuxcare.els1 x86_64 0:0.5.7-165.el9_5.tuxcare.els1 0:1.3.5-165.el9_5.tuxcare.els1 x86_64 0:2.5.1-165.el9_5.tuxcare.els1 0:5.14.2-165.el9_5.tuxcare.els1 0:1.2.1-165.el9_5.tuxcare.els1 x86_64 0:3.3.2-165.el9_5.tuxcare.els1 0:13.0.3-165.el9_5.tuxcare.els1 0:1.4.0-165.el9_5.tuxcare.els1 0:6.3.4.1-165.el9_5.tuxcare.els1 0:3.2.5-165.el9_5.tuxcare.els1 0:0.2.9-165.el9_5.tuxcare.els1 0:3.3.7-165.el9_5.tuxcare.els1 0:0.15.2-165.el9_5.tuxcare.els1 0:3.2.33-165.el9_5.tuxcare.els1 i686|x86_64 0:3.0.7-165.el9_5.tuxcare.els2 0:3.0.7-165.el9_5.tuxcare.els2 x86_64 0:3.0.0-165.el9_5.tuxcare.els2 0:2.2.33-165.el9_5.tuxcare.els2 x86_64 0:0.5.7-165.el9_5.tuxcare.els2 0:1.3.5-165.el9_5.tuxcare.els2 x86_64 0:2.5.1-165.el9_5.tuxcare.els2 0:5.14.2-165.el9_5.tuxcare.els2 0:1.2.1-165.el9_5.tuxcare.els2 x86_64 0:3.3.2-165.el9_5.tuxcare.els2 0:13.0.3-165.el9_5.tuxcare.els2 0:1.4.0-165.el9_5.tuxcare.els2 0:6.3.4.1-165.el9_5.tuxcare.els2 0:3.2.5-165.el9_5.tuxcare.els2 0:0.2.9-165.el9_5.tuxcare.els2 0:3.3.7-165.el9_5.tuxcare.els2 0:0.15.2-165.el9_5.tuxcare.els2 0:3.2.33-165.el9_5.tuxcare.els2 i686|x86_64 2:1.6.37-12.el9_6.tuxcare.els4 x86_64 2:1.6.37-12.el9_6.tuxcare.els4 x86_64 0:8.0.30-3.el9_6.tuxcare.els3 x86_64 0:8.0.44-1.el9_6.tuxcare.els2 i686|x86_64 0:3.11.11-2.el9_6.2.tuxcare.els1 i686|x86_64 0:2.72.0-10.el9_6.3.tuxcare.els1 0:2.72.0-10.el9_6.3.tuxcare.els1 x86_64 0:1.28.7-20.el9.tuxcare.els1 i686|x86_64 0:1.28.7-20.el9.tuxcare.els1 x86_64 1:2.3.3op2-33.el9_6.1.tuxcare.els1 i686|x86_64 1:2.3.3op2-33.el9_6.1.tuxcare.els1 1:2.3.3op2-33.el9_6.1.tuxcare.els1 i686|x86_64 0:13.23-1.el9.tuxcare.els1 1:9.0.50-1.el9_2.2.tuxcare.els1 i686|x86_64 0:3.0.7-165.el9_5.tuxcare.els3 0:3.0.7-165.el9_5.tuxcare.els3 x86_64 0:3.0.0-165.el9_5.tuxcare.els3 0:2.2.33-165.el9_5.tuxcare.els3 x86_64 0:0.5.7-165.el9_5.tuxcare.els3 0:1.3.5-165.el9_5.tuxcare.els3 x86_64 0:2.5.1-165.el9_5.tuxcare.els3 0:5.14.2-165.el9_5.tuxcare.els3 0:1.2.1-165.el9_5.tuxcare.els3 x86_64 0:3.3.2-165.el9_5.tuxcare.els3 0:13.0.3-165.el9_5.tuxcare.els3 0:1.4.0-165.el9_5.tuxcare.els3 0:6.3.4.1-165.el9_5.tuxcare.els3 0:3.2.5-165.el9_5.tuxcare.els3 0:0.2.9-165.el9_5.tuxcare.els3 0:3.3.7-165.el9_5.tuxcare.els3 0:0.15.2-165.el9_5.tuxcare.els3 0:3.2.33-165.el9_5.tuxcare.els3 i686|x86_64 0:3.8.3-9.el9_6.tuxcare.1 x86_64 0:3.8.3-9.el9_6.tuxcare.1 x86_64 0:13.23-1.el9.tuxcare.els1 0:13.23-1.el9.tuxcare.els1 i686|x86_64 0:3.11.11-2.el9_6.2.tuxcare.els2 x86_64 5:5.4.0-13.el9_6.tuxcare.els2 5:5.4.0-13.el9_6.tuxcare.els2 0:3.9.21-2.el9_6.2.tuxcare.els1 i686|x86_64 0:3.9.21-2.el9_6.2.tuxcare.els1 x86_64 3:10.5.29-2.el9_6.tuxcare.els1 x86_64 0:2.3.3-4.el9_6.tuxcare.els1 x86_64 0:2.4.62-4.el9_6.4.tuxcare.els2 0:2.4.62-4.el9_6.4.tuxcare.els2 x86_64 1:2.4.62-4.el9_6.4.tuxcare.els2 x86_64 1:3.25-4.el9_6.2.tuxcare.els1 x86_64 2:1.34-7.el9.tuxcare.els1 x86_64 1:2.3.3op2-33.el9_6.1.tuxcare.els2 i686|x86_64 1:2.3.3op2-33.el9_6.1.tuxcare.els2 1:2.3.3op2-33.el9_6.1.tuxcare.els2 x86_64 1:5.9.1-17.el9.tuxcare.els1 i686|x86_64 1:5.9.1-17.el9.tuxcare.els1 x86_64 0:1.25.3-1.el9_6.tuxcare.els2 0:1.25.3-1.el9_6.tuxcare.els2 i686|x86_64 0:2.68.4-16.el9_6.3.tuxcare.els1 0:2.68.4-16.el9_6.3.tuxcare.els1 x86_64 0:2.68.4-16.el9_6.3.tuxcare.els1 0:1.26.12-5.el9.tuxcare.els2 x86_64 1:17.0.18.0.8-1.el9.tuxcare.els1 x86_64 1:1.8.0.482.b08-1.el9.alma.1.tuxcare.els1 1:1.8.0.482.b08-1.el9.alma.1.tuxcare.els1 x86_64 1:16.20.2-8.el9_6.tuxcare.els1 1:16.20.2-8.el9_6.tuxcare.els1 i686|x86_64 1:16.20.2-8.el9_6.tuxcare.els1 x86_64 1:8.19.4_1.16.20.2-8.el9_6.tuxcare.els1 x86_64 2:9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els1 x86_64 1:16.20.2-8.el9_6.tuxcare.els2 1:16.20.2-8.el9_6.tuxcare.els2 i686|x86_64 1:16.20.2-8.el9_6.tuxcare.els2 x86_64 1:8.19.4_1.16.20.2-8.el9_6.tuxcare.els2 x86_64 2:9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els2 x86_64 2:2.99.8-4.el9_6.2.tuxcare.els3 i686|x86_64 2:2.99.8-4.el9_6.2.tuxcare.els3 x86_64 0:7.76.1-31.el9_6.1.tuxcare.els3 i686|x86_64 0:7.76.1-31.el9_6.1.tuxcare.els3 i686|x86_64 0:2.5.0-5.el9_6.tuxcare.els2 x86_64 0:2.5.0-5.el9_6.tuxcare.els2 x86_64 1:3.2.2-6.el9_6.1.tuxcare.6.els5 i686|x86_64 1:3.2.2-6.el9_6.1.tuxcare.6.els5 x86_64 1:16.20.2-8.el9_6.tuxcare.els5 1:16.20.2-8.el9_6.tuxcare.els5 i686|x86_64 1:16.20.2-8.el9_6.tuxcare.els5 x86_64 1:8.19.4_1.16.20.2-8.el9_6.tuxcare.els5 x86_64 2:9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els5 i686|x86_64 0:1.0.9-7.el9_5.tuxcare.els1 x86_64 0:1.0.9-7.el9_5.tuxcare.els1 x86_64 1:16.20.2-8.el9_6.tuxcare.els6 1:16.20.2-8.el9_6.tuxcare.els6 i686|x86_64 1:16.20.2-8.el9_6.tuxcare.els6 x86_64 1:8.19.4_1.16.20.2-8.el9_6.tuxcare.els6 x86_64 2:9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els6 i686|x86_64 2:1.6.37-12.el9_6.tuxcare.els5 x86_64 2:1.6.37-12.el9_6.tuxcare.els5 x86_64 0:6.9.13.25-1.el9_6.tuxcare.els2 (^5\.14\.0\-((?:(?:\d{4,}|[6-9]\d{2}|5[8-9]\d|57[1-9])(?:\.\d+)*|570\.(?:\d{3,}|[7-9]\d|6[3-9])(?:\.\d+)*|570\.62\.(?:\d{2,}|[2-9])(?:\.\d+)*|570\.62\.1\.\d+(?:\.\d+)*)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:570\.62\.1)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els(?:\d{2,}|[2-9]))?\.(?:x86_64|i686))$) x86_64 0:5.14.0-570.62.1.el9_6.tuxcare.1.els2 0:5.14.0-570.62.1.el9_6.tuxcare.1.els2 x86_64 1:21.0.10.0.7-1.el9.alma.1.tuxcare.els1 x86_64 1:16.20.2-8.el9_6.tuxcare.els7 1:16.20.2-8.el9_6.tuxcare.els7 i686|x86_64 1:16.20.2-8.el9_6.tuxcare.els7 x86_64 1:8.19.4_1.16.20.2-8.el9_6.tuxcare.els7 x86_64 2:9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els7 x86_64 0:6.9.13.25-1.el9_6.tuxcare.els3 x86_64 0:7.76.1-31.el9_6.1.tuxcare.els4 i686|x86_64 0:7.76.1-31.el9_6.1.tuxcare.els4 1:2.06-105.el9_6.tuxcare.1.els1 x86_64 1:2.06-105.el9_6.tuxcare.1.els1 i686|x86_64 0:2.68.4-16.el9_6.3.tuxcare.els2 0:2.68.4-16.el9_6.3.tuxcare.els2 x86_64 0:2.68.4-16.el9_6.3.tuxcare.els2 i686|x86_64 0:2.72.0-10.el9_6.3.tuxcare.els2 0:2.72.0-10.el9_6.3.tuxcare.els2 x86_64 0:7.76.1-31.el9_6.1.tuxcare.els5 i686|x86_64 0:7.76.1-31.el9_6.1.tuxcare.els5 i686|x86_64 2:1.6.37-12.el9_6.tuxcare.els6 x86_64 2:1.6.37-12.el9_6.tuxcare.els6 x86_64 0:1.25.3-1.el9_6.tuxcare.els3 0:1.25.3-1.el9_6.tuxcare.els3 x86_64 0:6.9.13.25-1.el9_6.tuxcare.els4 x86_64 2:2.99.8-4.el9_6.2.tuxcare.els4 i686|x86_64 2:2.99.8-4.el9_6.2.tuxcare.els4 x86_64 0:2.34-168.el9.24.tuxcare.els1 i686|x86_64 0:2.34-168.el9.24.tuxcare.els1 0:2.34-168.el9.24.tuxcare.els1 x86_64 0:1.25.7-1.el9_6.tuxcare.els1 0:1.25.7-1.el9_6.tuxcare.els1 x86_64 1:16.20.2-8.el9_6.tuxcare.els8 1:16.20.2-8.el9_6.tuxcare.els8 i686|x86_64 1:16.20.2-8.el9_6.tuxcare.els8 x86_64 1:8.19.4_1.16.20.2-8.el9_6.tuxcare.els8 x86_64 2:9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els8 x86_64 0:2.34-168.el9.24.tuxcare.els2 i686|x86_64 0:2.34-168.el9.24.tuxcare.els2 0:2.34-168.el9.24.tuxcare.els2 x86_64 0:10.2.6-15.el9_6.tuxcare.els2 x86_64 0:5.1.1-11.el9_6.tuxcare.els1 i686|x86_64 0:1.5.30-14.el9.tuxcare.els1 i686|x86_64 0:3.14.0-16.el9.tuxcare.els2 0:3.14.0-16.el9.tuxcare.els2 x86_64 0:3.14.0-16.el9.tuxcare.els2 x86_64 0:10.2.6-15.el9_6.tuxcare.els3 x86_64 0:2.34-168.el9.24.tuxcare.els3 i686|x86_64 0:2.34-168.el9.24.tuxcare.els3 0:2.34-168.el9.24.tuxcare.els3 x86_64 5:5.4.0-13.el9_6.tuxcare.els3 5:5.4.0-13.el9_6.tuxcare.els3 0:20241117-2.el9_6.1.tuxcare.els1 x86_64 0:20241117-2.el9_6.1.tuxcare.els1 x86_64 0:0.5.13-13.el9_6.tuxcare.els1 i686|x86_64 0:0.5.13-13.el9_6.tuxcare.els1 x86_64 0:0.23.0-1.el9_6.tuxcare.els1 0:0.23.0-1.el9_6.tuxcare.els1 x86_64 0:2.6.1-12.el9_6.tuxcare.els1 0:2.6.1-12.el9_6.tuxcare.els1 x86_64 1:1.6.2-2.el9_6.tuxcare.els1 x86_64 1:16.20.2-8.el9_6.tuxcare.els9 1:16.20.2-8.el9_6.tuxcare.els9 i686|x86_64 1:16.20.2-8.el9_6.tuxcare.els9 x86_64 1:8.19.4_1.16.20.2-8.el9_6.tuxcare.els9 x86_64 2:9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els9 x86_64 4:1.2.5-3.el9_6.tuxcare.els1 x86_64 2:1.18.1-2.el9_6.tuxcare.els1 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els3 2:8.2.2637-22.el9_6.1.tuxcare.els3 x86_64 0:1.28.7-20.el9.tuxcare.els3 i686|x86_64 0:1.28.7-20.el9.tuxcare.els3 i686|x86_64 0:4.4.0-13.el9_6.2.tuxcare.els4 x86_64 0:4.4.0-13.el9_6.2.tuxcare.els4 x86_64 0:10.2.6-15.el9_6.tuxcare.els4 (^5\.14\.0\-((?:(?:\d{4,}|[6-9]\d{2}|5[8-9]\d|57[1-9])(?:\.\d+)*|570\.(?:\d{3,}|[7-9]\d|6[3-9])(?:\.\d+)*|570\.62\.(?:\d{2,}|[2-9])(?:\.\d+)*|570\.62\.1\.\d+(?:\.\d+)*)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:570\.62\.1)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els(?:\d{2,}|[3-9]))?\.(?:x86_64|i686))$) x86_64 0:5.14.0-570.62.1.el9_6.tuxcare.1.els3 0:5.14.0-570.62.1.el9_6.tuxcare.1.els3 x86_64 0:8.0.45-1.el9_6.tuxcare.els1 i686|x86_64 0:4.4.0-13.el9_6.2.tuxcare.els5 x86_64 0:4.4.0-13.el9_6.2.tuxcare.els5 i686|x86_64 0:0.8-22.el9_6.1.tuxcare.els1 x86_64 0:0.8-22.el9_6.1.tuxcare.els1 x86_64 0:3.6.1-2.el9_6.tuxcare.els2 x86_64 0:3.6.0-10.el9_6.tuxcare.els2 0:3.6.0-10.el9_6.tuxcare.els2 x86_64 0:1.24.1-2.el9_6.tuxcare.els2 i686|x86_64 1:2.5.4-34.el9_6.tuxcare.els1 x86_64 1:2.5.4-34.el9_6.tuxcare.els1 x86_64 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els1 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els1 x86_64 0:3.6.1-2.el9_6.tuxcare.els3 x86_64 0:13.23-1.el9.tuxcare.els3 0:13.23-1.el9.tuxcare.els3 x86_64 0:132.2-3.el9_6.alma.1.tuxcare.els1 0:3.9.21-2.el9_6.2.tuxcare.els2 i686|x86_64 0:3.9.21-2.el9_6.2.tuxcare.els2 i686|x86_64 0:3.11.11-2.el9_6.2.tuxcare.els3 x86_64 2:2.99.8-4.el9_6.2.tuxcare.els5 i686|x86_64 2:2.99.8-4.el9_6.2.tuxcare.els5 i686|x86_64 0:2.35.2-63.el9.tuxcare.els4 x86_64 0:2.35.2-63.el9.tuxcare.els4 x86_64 0:3.1.1-3.el9.tuxcare.els1 i686|x86_64 0:3.1.1-3.el9.tuxcare.els1 i686|x86_64 0:1.9.0-9.el9_6.tuxcare.els1 x86_64 0:1.9.0-9.el9_6.tuxcare.els1 i686|x86_64 0:2.5.0-5.el9_6.tuxcare.els3 x86_64 0:2.5.0-5.el9_6.tuxcare.els3 i686|x86_64 0:0.10.4-15.el9_6.tuxcare.els3 0:0.10.4-15.el9_6.tuxcare.els3 x86_64 0:7.76.1-31.el9_6.1.tuxcare.els7 i686|x86_64 0:7.76.1-31.el9_6.1.tuxcare.els7 i686|x86_64 1:1.1.1k-5.el9_6.1.tuxcare.els1 x86_64 0:13.23-1.el9.tuxcare.els4 0:13.23-1.el9.tuxcare.els4 0:3.9.21-2.el9_6.2.tuxcare.els3 i686|x86_64 0:3.9.21-2.el9_6.2.tuxcare.els3 x86_64 0:13.23-1.el9.tuxcare.els5 0:13.23-1.el9.tuxcare.els5 1:9.0.87-3.el9_6.3.tuxcare.els3 x86_64 0:0.27.5-2.el9.tuxcare.els3 i686|x86_64 0:0.27.5-2.el9.tuxcare.els3 0:0.27.5-2.el9.tuxcare.els3 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els4 2:8.2.2637-22.el9_6.1.tuxcare.els4 i686|x86_64 0:4.0.2-10.el9.tuxcare.els1 0:4.0.2-10.el9.tuxcare.els1 x86_64 0:4.0.2-10.el9.tuxcare.els1 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els5 2:8.2.2637-22.el9_6.1.tuxcare.els5 i686|x86_64 0:4.0.2-10.el9.tuxcare.els2 0:4.0.2-10.el9.tuxcare.els2 x86_64 0:4.0.2-10.el9.tuxcare.els2 x86_64 0:3.5.3-6.el9_6.tuxcare.els2 i686|x86_64 0:3.5.3-6.el9_6.tuxcare.els2 1:9.0.87-3.el9_6.3.tuxcare.els4 i686|x86_64 0:3.11.11-2.el9_6.2.tuxcare.els4 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els6 2:8.2.2637-22.el9_6.1.tuxcare.els6 i686|x86_64 0:2.5.0-5.el9_6.tuxcare.els6 x86_64 0:2.5.0-5.el9_6.tuxcare.els6 1:9.0.87-3.el9_6.3.tuxcare.els5 x86_64 0:1.25.7-1.el9_6.tuxcare.els2 0:1.25.7-1.el9_6.tuxcare.els2 x86_64 0:6.9.13.25-1.el9_6.tuxcare.els5 x86_64 1:3.4.10-7.el9_6.tuxcare.els2 i686|x86_64 1:3.4.10-7.el9_6.tuxcare.els2 x86_64 7:5.5-19.el9_6.1.tuxcare.els2 x86_64 0:2.3.3-4.el9_6.tuxcare.els2 x86_64 2:2.99.8-4.el9_6.2.tuxcare.els6 i686|x86_64 2:2.99.8-4.el9_6.2.tuxcare.els6 x86_64 7:5.5-19.el9_6.1.tuxcare.els3 x86_64 7:5.5-19.el9_6.1.tuxcare.els4 i686|x86_64 0:9.54.0-19.el9_6.tuxcare.els1 0:9.54.0-19.el9_6.tuxcare.els1 x86_64 0:9.54.0-19.el9_6.tuxcare.els1 x86_64 0:3.1.1-3.el9.tuxcare.els2 i686|x86_64 0:3.1.1-3.el9.tuxcare.els2 x86_64 0:3.24.0-5.el9_6.tuxcare.els1 i686|x86_64 0:3.24.0-5.el9_6.tuxcare.els1 x86_64 1:16.20.2-8.el9_6.tuxcare.els10 1:16.20.2-8.el9_6.tuxcare.els10 i686|x86_64 1:16.20.2-8.el9_6.tuxcare.els10 x86_64 1:8.19.4_1.16.20.2-8.el9_6.tuxcare.els10 x86_64 2:9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els10 x86_64 0:8.7p1-45.el9.tuxcare.els2 x86_64 0:0.10.4-5.45.el9.tuxcare.els2 x86_64 0:0.27.5-2.el9.tuxcare.els4 i686|x86_64 0:0.27.5-2.el9.tuxcare.els4 0:0.27.5-2.el9.tuxcare.els4 i686|x86_64 0:3.8.3-9.el9_6.tuxcare.1.els2 x86_64 0:3.8.3-9.el9_6.tuxcare.1.els2 x86_64 0:1.14.1-2.el9.tuxcare.els1 0:1.14.1-2.el9.tuxcare.els1 i686|x86_64 0:1.14.1-2.el9.tuxcare.els1 x86_64 0:3.5.3-6.el9_6.tuxcare.els3 i686|x86_64 0:3.5.3-6.el9_6.tuxcare.els3 x86_64 0:3.2.5-3.el9.tuxcare.els1 0:3.2.5-3.el9.tuxcare.els1 i686|x86_64 0:2.35.2-63.el9.tuxcare.els6 x86_64 0:2.35.2-63.el9.tuxcare.els6 i686|x86_64 0:2.9.13-12.el9_6.tuxcare.els3 x86_64 0:2.9.13-12.el9_6.tuxcare.els3 x86_64 32:9.16.23-31.el9_6.2.tuxcare.els1 i686|x86_64 32:9.16.23-31.el9_6.2.tuxcare.els1 32:9.16.23-31.el9_6.2.tuxcare.els1 1:9.0.50-1.el9_2.2.tuxcare.els2 x86_64 0:1.38.5-5.el9_6.tuxcare.els1 0:1.38.5-5.el9_6.tuxcare.els1 i686|x86_64 0:21.01.0-21.el9.tuxcare.els2 0:21.01.0-21.el9.tuxcare.els2 x86_64 0:21.01.0-21.el9.tuxcare.els2 x86_64 0:10.2.6-15.el9_6.tuxcare.els5 x86_64 0:6.2.20-1.el9_6.tuxcare.els1 i686|x86_64 0:6.2.20-1.el9_6.tuxcare.els1 0:6.2.20-1.el9_6.tuxcare.els1 x86_64 0:10.2.6-15.el9_6.tuxcare.els6 0:3.9.21-2.el9_6.2.tuxcare.els5 i686|x86_64 0:3.9.21-2.el9_6.2.tuxcare.els5 x86_64 0:2.34-168.el9.24.tuxcare.els4 i686|x86_64 0:2.34-168.el9.24.tuxcare.els4 0:2.34-168.el9.24.tuxcare.els4 i686|x86_64 0:0.10.4-15.el9_6.tuxcare.els4 0:0.10.4-15.el9_6.tuxcare.els4 i686|x86_64 0:2.68.4-16.el9_6.3.tuxcare.els3 0:2.68.4-16.el9_6.3.tuxcare.els3 x86_64 0:2.68.4-16.el9_6.3.tuxcare.els3 i686|x86_64 0:4.16.0-9.el9.tuxcare.els1 x86_64 0:4.16.0-9.el9.tuxcare.els1 i686|x86_64 0:9.54.0-19.el9_6.tuxcare.els2 0:9.54.0-19.el9_6.tuxcare.els2 x86_64 0:9.54.0-19.el9_6.tuxcare.els2 i686|x86_64 0:1.22.12-4.el9.tuxcare.els1 x86_64 0:1.22.12-4.el9.tuxcare.els1 x86_64 0:1.23.1-2.el9_6.tuxcare.els1 x86_64 0:3.6.1-2.el9_6.tuxcare.els4 0:252-51.el9_6.3.alma.2.tuxcare.els1 i686|x86_64 0:252-51.el9_6.3.alma.2.tuxcare.els1 x86_64 0:252-51.el9_6.3.alma.2.tuxcare.els1 i686|x86_64 0:4.4.0-13.el9_6.2.tuxcare.els6 x86_64 0:4.4.0-13.el9_6.2.tuxcare.els6 i686|x86_64 0:1.5.30-14.el9.tuxcare.els2 x86_64 0:3.5.3-6.el9_6.tuxcare.els4 i686|x86_64 0:3.5.3-6.el9_6.tuxcare.els4 i686|x86_64 0:2.35.2-63.el9.tuxcare.els7 x86_64 0:2.35.2-63.el9.tuxcare.els7 i686|x86_64 0:1.22.12-3.el9.tuxcare.els1 i686|x86_64 0:1.1.34-13.el9_6.tuxcare.els2 x86_64 0:8.7p1-45.el9.tuxcare.els3 x86_64 0:0.10.4-5.45.el9.tuxcare.els3 x86_64 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els2 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els2 x86_64 0:7.76.1-31.el9_6.1.tuxcare.els9 i686|x86_64 0:7.76.1-31.el9_6.1.tuxcare.els9 i686|x86_64 0:2.35.2-63.el9.tuxcare.els8 x86_64 0:2.35.2-63.el9.tuxcare.els8 i686|x86_64 0:2.72.0-10.el9_6.3.tuxcare.els3 0:2.72.0-10.el9_6.3.tuxcare.els3 x86_64 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els3 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els3 i686|x86_64 0:5.2.1-9.el9.tuxcare.els2 x86_64 0:5.2.1-9.el9.tuxcare.els2 i686|x86_64 0:2.44.0-26.el9.tuxcare.els1 x86_64 0:2.44.0-26.el9.tuxcare.els1 i686|x86_64 0:21.01.0-21.el9.tuxcare.els3 0:21.01.0-21.el9.tuxcare.els3 x86_64 0:21.01.0-21.el9.tuxcare.els3 i686|x86_64 0:2.72.0-10.el9_6.3.tuxcare.els4 0:2.72.0-10.el9_6.3.tuxcare.els4 x86_64 1:2.3.3op2-33.el9_6.1.tuxcare.els3 i686|x86_64 1:2.3.3op2-33.el9_6.1.tuxcare.els3 1:2.3.3op2-33.el9_6.1.tuxcare.els3 i686|x86_64 0:0.6.22-6.el9.tuxcare.els1 x86_64 0:0.6.22-6.el9.tuxcare.els1 x86_64 1:16.20.2-8.el9_6.tuxcare.els11 1:16.20.2-8.el9_6.tuxcare.els11 i686|x86_64 1:16.20.2-8.el9_6.tuxcare.els11 x86_64 1:8.19.4_1.16.20.2-8.el9_6.tuxcare.els11 x86_64 2:9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els11 x86_64 2:2.99.8-4.el9_6.2.tuxcare.els7 i686|x86_64 2:2.99.8-4.el9_6.2.tuxcare.els7 i686|x86_64 0:2.72.0-10.el9_6.3.tuxcare.els5 0:2.72.0-10.el9_6.3.tuxcare.els5 x86_64 0:3.5.3-6.el9_6.tuxcare.els5 i686|x86_64 0:3.5.3-6.el9_6.tuxcare.els5 x86_64 0:3.2.5-3.el9.tuxcare.els2 0:3.2.5-3.el9.tuxcare.els2 x86_64 1:16.20.2-8.el9_6.tuxcare.els12 1:16.20.2-8.el9_6.tuxcare.els12 i686|x86_64 1:16.20.2-8.el9_6.tuxcare.els12 x86_64 1:8.19.4_1.16.20.2-8.el9_6.tuxcare.els12 x86_64 2:9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els12 i686|x86_64 0:5.2.1-9.el9.tuxcare.els3 x86_64 0:5.2.1-9.el9.tuxcare.els3 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els7 2:8.2.2637-22.el9_6.1.tuxcare.els7 x86_64 0:3.1.1-3.el9.tuxcare.els4 i686|x86_64 0:3.1.1-3.el9.tuxcare.els4 i686|x86_64 0:3.0.7-165.el9_5.tuxcare.els4 0:3.0.7-165.el9_5.tuxcare.els4 x86_64 0:3.0.0-165.el9_5.tuxcare.els4 0:2.2.33-165.el9_5.tuxcare.els4 x86_64 0:0.5.7-165.el9_5.tuxcare.els4 0:1.3.5-165.el9_5.tuxcare.els4 x86_64 0:2.5.1-165.el9_5.tuxcare.els4 0:5.14.2-165.el9_5.tuxcare.els4 0:1.2.1-165.el9_5.tuxcare.els4 x86_64 0:3.3.2-165.el9_5.tuxcare.els4 0:13.0.3-165.el9_5.tuxcare.els4 0:1.4.0-165.el9_5.tuxcare.els4 0:6.3.4.1-165.el9_5.tuxcare.els4 0:3.2.5-165.el9_5.tuxcare.els4 0:0.2.9-165.el9_5.tuxcare.els4 0:3.3.7-165.el9_5.tuxcare.els4 0:0.15.2-165.el9_5.tuxcare.els4 0:3.2.33-165.el9_5.tuxcare.els4 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els9 2:8.2.2637-22.el9_6.1.tuxcare.els9 i686|x86_64 0:2.35.2-63.el9.tuxcare.els9 x86_64 0:2.35.2-63.el9.tuxcare.els9 x86_64 0:3.6.0-10.el9_6.tuxcare.els3 0:3.6.0-10.el9_6.tuxcare.els3 x86_64 2:1.18.1-2.el9_6.tuxcare.els2 x86_64 0:132.2-3.el9_6.alma.1.tuxcare.els2 x86_64 0:1.38.5-5.el9_6.tuxcare.els2 0:1.38.5-5.el9_6.tuxcare.els2 x86_64 1:1.6.2-2.el9_6.tuxcare.els2 x86_64 0:5.1.0-6.el9.tuxcare.els1 0:5.1.0-6.el9.tuxcare.els1 x86_64 7:5.5-19.el9_6.1.tuxcare.els5 x86_64 0:1.14.1-9.el9_6.tuxcare.els1 0:1.14.1-9.el9_6.tuxcare.els1 x86_64 4:1.2.5-3.el9_6.tuxcare.els2 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els11 2:8.2.2637-22.el9_6.1.tuxcare.els11 x86_64 0:3.5.3-6.el9_6.tuxcare.els6 i686|x86_64 0:3.5.3-6.el9_6.tuxcare.els6 x86_64 1:3.4.10-7.el9_6.tuxcare.els3 i686|x86_64 1:3.4.10-7.el9_6.tuxcare.els3 x86_64 2:1.39.6-1.el9_6.tuxcare.els6 x86_64 1:3.4.10-7.el9_6.tuxcare.els4 i686|x86_64 1:3.4.10-7.el9_6.tuxcare.els4 x86_64 1:11.0.30.0.7-1.el9.tuxcare.els1 x86_64 1:16.20.2-8.el9_6.tuxcare.els13 1:16.20.2-8.el9_6.tuxcare.els13 i686|x86_64 1:16.20.2-8.el9_6.tuxcare.els13 x86_64 1:8.19.4_1.16.20.2-8.el9_6.tuxcare.els13 x86_64 2:9.4.146.26_1.16.20.2-8.el9_6.tuxcare.els13 x86_64 0:2.46-9.el9.tuxcare.els1 x86_64 0:5.1.1-11.el9_6.tuxcare.els2 x86_64 0:334.2-1.el9_6.tuxcare.els1 0:334.2-1.el9_6.tuxcare.els1 0:3.3.0-13.el9.tuxcare.els1 x86_64 1:2.3.3op2-33.el9_6.1.tuxcare.els4 i686|x86_64 1:2.3.3op2-33.el9_6.1.tuxcare.els4 1:2.3.3op2-33.el9_6.1.tuxcare.els4 x86_64 0:6.9.13.25-1.el9_6.tuxcare.els6 i686|x86_64 0:2.35.2-63.el9.tuxcare.els10 x86_64 0:2.35.2-63.el9.tuxcare.els10 i686|x86_64 0:10.40-6.el9.tuxcare.els1 x86_64 0:10.40-6.el9.tuxcare.els1 0:10.40-6.el9.tuxcare.els1 i686|x86_64 0:1.12-6.el9.tuxcare.els1 i686|x86_64 0:1.12.9-4.el9_6.tuxcare.els1 0:1.12.9-4.el9_6.tuxcare.els1 x86_64 0:1.12.9-4.el9_6.tuxcare.els1 x86_64 0:2.50.6-1.el9_6.tuxcare.els1 x86_64 1:2.3.3op2-33.el9_6.1.tuxcare.els5 i686|x86_64 1:2.3.3op2-33.el9_6.1.tuxcare.els5 1:2.3.3op2-33.el9_6.1.tuxcare.els5 x86_64 0:8.7p1-45.el9.tuxcare.els4 x86_64 0:0.10.4-5.45.el9.tuxcare.els4 (^5\.14\.0\-((?:(?:\d{4,}|[6-9]\d{2}|5[8-9]\d|57[1-9])(?:\.\d+)*|570\.(?:\d{3,}|[7-9]\d|6[3-9])(?:\.\d+)*|570\.62\.(?:\d{2,}|[2-9])(?:\.\d+)*|570\.62\.1\.\d+(?:\.\d+)*)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:570\.62\.1)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els(?:\d{2,}|[4-9]))?\.(?:x86_64|i686))$) x86_64 0:5.14.0-570.62.1.el9_6.tuxcare.1.els4 0:5.14.0-570.62.1.el9_6.tuxcare.1.els4 i686|x86_64 0:2.72.0-10.el9_6.3.tuxcare.els6 0:2.72.0-10.el9_6.3.tuxcare.els6 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els17 2:8.2.2637-22.el9_6.1.tuxcare.els17 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els16 2:8.2.2637-22.el9_6.1.tuxcare.els16 x86_64 0:3.1.9-2.el9_6.tuxcare.els1 i686|x86_64 0:3.1.9-2.el9_6.tuxcare.els1 i686|x86_64 0:1.6-17.el9_6.2.tuxcare.els1 i686|x86_64 0:2.42.6-6.el9_6.tuxcare.els1 x86_64 0:2.42.6-6.el9_6.tuxcare.els1 0:3.9.21-2.el9_6.2.tuxcare.els6 i686|x86_64 0:3.9.21-2.el9_6.2.tuxcare.els6 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els18 2:8.2.2637-22.el9_6.1.tuxcare.els18 i686|x86_64 0:3.11.11-2.el9_6.2.tuxcare.els6 i686|x86_64 0:0.21.1-1.el9.tuxcare.els2 x86_64 0:0.21.1-1.el9.tuxcare.els2 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els19 2:8.2.2637-22.el9_6.1.tuxcare.els19 x86_64 0:10.2.6-15.el9_6.tuxcare.els7 x86_64 0:2.4.62-4.el9_6.4.tuxcare.els3 0:2.4.62-4.el9_6.4.tuxcare.els3 x86_64 1:2.4.62-4.el9_6.4.tuxcare.els3 x86_64 1:3.2.2-6.el9_6.1.tuxcare.6.els9 i686|x86_64 1:3.2.2-6.el9_6.1.tuxcare.6.els9 i686|x86_64 0:1.22.12-4.el9_6.tuxcare.els1 i686|x86_64 0:1.9.0-9.el9_6.tuxcare.els2 x86_64 0:1.9.0-9.el9_6.tuxcare.els2 i686|x86_64 0:1.43.0-6.el9.tuxcare.els1 x86_64 0:1.43.0-6.el9.tuxcare.els1 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els20 2:8.2.2637-22.el9_6.1.tuxcare.els20 x86_64 0:1.14.1-9.el9_6.tuxcare.els2 0:1.14.1-9.el9_6.tuxcare.els2 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els22 2:8.2.2637-22.el9_6.1.tuxcare.els22 x86_64 1:21.0.11.0.10-2.el9.alma.1.tuxcare.els1 i686|x86_64 2:1.6.37-12.el9_6.tuxcare.els7 x86_64 2:1.6.37-12.el9_6.tuxcare.els7 i686|x86_64 0:23.2.7-5.el9_6.tuxcare.els1 x86_64 0:2.0.26-4.el9_6.1.tuxcare.els1 x86_64 0:1.9.5p2-10.el9_6.2.tuxcare.els1 i686|x86_64 0:2.48-9.el9_2.tuxcare.els1 x86_64 0:2.48-9.el9_2.tuxcare.els1 i686|x86_64 0:4.4.0-13.el9_6.2.tuxcare.els7 x86_64 0:4.4.0-13.el9_6.2.tuxcare.els7 1:9.0.87-3.el9_6.3.tuxcare.els6 x86_64 0:6.0-58.el9_6.tuxcare.els1 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els23 2:8.2.2637-22.el9_6.1.tuxcare.els23 i686|x86_64 0:1.6-17.el9_6.2.tuxcare.els2 i686|x86_64 0:3.11.11-2.el9_6.2.tuxcare.els7 i686|x86_64 0:1.43.0-6.el9.tuxcare.els2 x86_64 0:1.43.0-6.el9.tuxcare.els2 x86_64 4:5.32.1-481.1.el9_6.tuxcare.els1 0:1.01-481.1.el9_6.tuxcare.els1 0:5.74-481.1.el9_6.tuxcare.els1 x86_64 0:1.80-481.1.el9_6.tuxcare.els1 0:1.23-481.1.el9_6.tuxcare.els1 0:0.66-481.1.el9_6.tuxcare.els1 0:0.03-481.1.el9_6.tuxcare.els1 0:0.06-481.1.el9_6.tuxcare.els1 x86_64 0:1.28-481.1.el9_6.tuxcare.els1 0:1.06-481.1.el9_6.tuxcare.els1 0:1.05-481.1.el9_6.tuxcare.els1 0:2.27-481.1.el9_6.tuxcare.els1 x86_64 0:1.47-481.1.el9_6.tuxcare.els1 0:1.11-481.1.el9_6.tuxcare.els1 x86_64 0:1.30-481.1.el9_6.tuxcare.els1 0:0.25-481.1.el9_6.tuxcare.els1 0:1.35-481.1.el9_6.tuxcare.els1 0:1.09-481.1.el9_6.tuxcare.els1 x86_64 0:1.13-481.1.el9_6.tuxcare.els1 0:2.85-481.1.el9_6.tuxcare.els1 0:1.100.600-481.1.el9_6.tuxcare.els1 0:2.34-481.1.el9_6.tuxcare.els1 x86_64 0:1.12-481.1.el9_6.tuxcare.els1 0:1.37-481.1.el9_6.tuxcare.els1 0:1.10-481.1.el9_6.tuxcare.els1 0:2.03-481.1.el9_6.tuxcare.els1 0:1.51-481.1.el9_6.tuxcare.els1 x86_64 0:1.18-481.1.el9_6.tuxcare.els1 0:1.12-481.1.el9_6.tuxcare.els1 x86_64 0:0.23-481.1.el9_6.tuxcare.els1 x86_64 0:1.20-481.1.el9_6.tuxcare.els1 0:1.02-481.1.el9_6.tuxcare.els1 0:0.44-481.1.el9_6.tuxcare.els1 x86_64 0:0.19-481.1.el9_6.tuxcare.els1 x86_64 0:1.43-481.1.el9_6.tuxcare.els1 0:1.21-481.1.el9_6.tuxcare.els1 1:0.21-481.1.el9_6.tuxcare.els1 0:1.59-481.1.el9_6.tuxcare.els1 0:1.03-481.1.el9_6.tuxcare.els1 1:0.08-481.1.el9_6.tuxcare.els1 x86_64 0:1.15-481.1.el9_6.tuxcare.els1 0:0.67-481.1.el9_6.tuxcare.els1 x86_64 0:1.16-481.1.el9_6.tuxcare.els1 x86_64 0:1.48-481.1.el9_6.tuxcare.els1 x86_64 0:1.94-481.1.el9_6.tuxcare.els1 0:1.13-481.1.el9_6.tuxcare.els1 0:1.25-481.1.el9_6.tuxcare.els1 0:2.41-481.1.el9_6.tuxcare.els1 0:1.07-481.1.el9_6.tuxcare.els1 0:1.26-481.1.el9_6.tuxcare.els1 0:1.08-481.1.el9_6.tuxcare.els1 x86_64 0:1.23-481.1.el9_6.tuxcare.els1 0:1.403-481.1.el9_6.tuxcare.els1 0:1.17-481.1.el9_6.tuxcare.els1 0:1.31-481.1.el9_6.tuxcare.els1 0:3.05-481.1.el9_6.tuxcare.els1 0:2.13-481.1.el9_6.tuxcare.els1 0:4.6-481.1.el9_6.tuxcare.els1 0:1.1-481.1.el9_6.tuxcare.els1 x86_64 0:1.3401-481.1.el9_6.tuxcare.els1 0:0.75-481.1.el9_6.tuxcare.els1 0:1.56-481.1.el9_6.tuxcare.els1 0:0.04-481.1.el9_6.tuxcare.els1 i686|x86_64 4:5.32.1-481.1.el9_6.tuxcare.els1 0:5.32.1-481.1.el9_6.tuxcare.els1 0:0.13-481.1.el9_6.tuxcare.els1 0:0.60.800-481.1.el9_6.tuxcare.els1 x86_64 0:0.65-481.1.el9_6.tuxcare.els1 4:5.32.1-481.1.el9_6.tuxcare.els1 0:0.02-481.1.el9_6.tuxcare.els1 x86_64 0:5.32.1-481.1.el9_6.tuxcare.els1 0:2.04-481.1.el9_6.tuxcare.els1 0:1.04-481.1.el9_6.tuxcare.els1 i686|x86_64 1:2.3.16-15.el9.tuxcare.els1 x86_64 1:2.3.16-15.el9.tuxcare.els1 0:3.9.21-2.el9_6.2.tuxcare.els7 i686|x86_64 0:3.9.21-2.el9_6.2.tuxcare.els7 x86_64 1:3.2.2-6.el9_6.1.tuxcare.6 i686|x86_64 1:3.2.2-6.el9_6.1.tuxcare.6 x86_64 2:1.39.6-1.el9_6.tuxcare.els7 x86_64 1:17.0.19.0.10-1.el9.tuxcare.els1 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els24 2:8.2.2637-22.el9_6.1.tuxcare.els24 i686|x86_64 0:0.10.4-15.el9_6.tuxcare.els7 0:0.10.4-15.el9_6.tuxcare.els7 (^5\.14\.0\-((?:(?:\d{4,}|[6-9]\d{2}|5[8-9]\d|57[1-9])(?:\.\d+)*|570\.(?:\d{3,}|[7-9]\d|6[3-9])(?:\.\d+)*|570\.62\.(?:\d{2,}|[2-9])(?:\.\d+)*|570\.62\.1\.\d+(?:\.\d+)*)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:570\.62\.1)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els(?:\d{2,}|[5-9]))?\.(?:x86_64|i686))$) x86_64 0:5.14.0-570.62.1.el9_6.tuxcare.1.els5 0:5.14.0-570.62.1.el9_6.tuxcare.1.els5 i686|x86_64 0:0.10.4-15.el9_6.tuxcare.els5 0:0.10.4-15.el9_6.tuxcare.els5 x86_64 0:2.4.62-4.el9_6.4.tuxcare.els4 0:2.4.62-4.el9_6.4.tuxcare.els4 x86_64 1:2.4.62-4.el9_6.4.tuxcare.els4 i686|x86_64 0:0.23.0-5.el9.tuxcare.els2 x86_64 0:1.14.1-5.el9_0.tuxcare.els1 0:1.14.1-5.el9_0.tuxcare.els1 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els26 2:8.2.2637-22.el9_6.1.tuxcare.els26 i686|x86_64 1:2.3.16-15.el9.tuxcare.els2 x86_64 1:2.3.16-15.el9.tuxcare.els2 x86_64 5:5.4.0-13.el9_6.tuxcare.els4 5:5.4.0-13.el9_6.tuxcare.els4 x86_64 0:6.2.20-1.el9_6.tuxcare.els2 i686|x86_64 0:6.2.20-1.el9_6.tuxcare.els2 0:6.2.20-1.el9_6.tuxcare.els2 i686|x86_64 0:1.6.14-2.el9.tuxcare.els1 x86_64 0:1.6.14-2.el9.tuxcare.els1 i686|x86_64 0:0.23.0-5.el9.tuxcare.els3 x86_64 0:4.99.1-1.el9.tuxcare.els2 x86_64 0:4.99.1-1.el9.tuxcare.els3 x86_64 0:3.1.1-3.el9.tuxcare.els6 i686|x86_64 0:3.1.1-3.el9.tuxcare.els6 x86_64 0:1.2.6-1.el9.tuxcare.els1 i686|x86_64 0:1.2.6-1.el9.tuxcare.els1 (^5\.14\.0\-((?:(?:\d{4,}|[6-9]\d{2}|5[8-9]\d|57[1-9])(?:\.\d+)*|570\.(?:\d{3,}|[7-9]\d|6[3-9])(?:\.\d+)*|570\.62\.(?:\d{2,}|[2-9])(?:\.\d+)*|570\.62\.1\.\d+(?:\.\d+)*)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:570\.62\.1)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els(?:\d{2,}|[6-9]))?\.(?:x86_64|i686))$) x86_64 0:5.14.0-570.62.1.el9_6.tuxcare.1.els6 0:5.14.0-570.62.1.el9_6.tuxcare.1.els6 x86_64 2:1.34-7.el9.tuxcare.els2 0:3.9.21-2.el9_6.2.tuxcare.els8 i686|x86_64 0:3.9.21-2.el9_6.2.tuxcare.els8 x86_64 0:1.25.7-1.el9_6.tuxcare.els3 0:1.25.7-1.el9_6.tuxcare.els3 x86_64 2:8.2.2637-22.el9_6.1.tuxcare.els27 2:8.2.2637-22.el9_6.1.tuxcare.els27 x86_64 0:4.21.3-14.el9_6.tuxcare.els1 i686|x86_64 0:4.21.3-14.el9_6.tuxcare.els1 0:4.21.3-14.el9_6.tuxcare.els1 x86_64 2:2.99.8-4.el9_6.2.tuxcare.els11 i686|x86_64 2:2.99.8-4.el9_6.2.tuxcare.els11 x86_64 0:7.76.1-31.el9_6.1.tuxcare.els10 i686|x86_64 0:7.76.1-31.el9_6.1.tuxcare.els10 x86_64 0:3.5.3-6.el9_6.tuxcare.els7 i686|x86_64 0:3.5.3-6.el9_6.tuxcare.els7 i686|x86_64 0:9.54.0-19.el9_6.tuxcare.els3 0:9.54.0-19.el9_6.tuxcare.els3 x86_64 0:9.54.0-19.el9_6.tuxcare.els3 i686|x86_64 2:1.6.37-12.el9_6.tuxcare.els8 x86_64 2:1.6.37-12.el9_6.tuxcare.els8 (^5\.14\.0\-((?:(?:\d{4,}|[6-9]\d{2}|5[8-9]\d|57[1-9])(?:\.\d+)*|570\.(?:\d{3,}|[7-9]\d|6[3-9])(?:\.\d+)*|570\.62\.(?:\d{2,}|[2-9])(?:\.\d+)*|570\.62\.1\.\d+(?:\.\d+)*)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:570\.62\.1)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els(?:\d{2,}|[8-9]))?\.(?:x86_64|i686))$) x86_64 0:5.14.0-570.62.1.el9_6.tuxcare.1.els8 0:5.14.0-570.62.1.el9_6.tuxcare.1.els8 x86_64 0:8.7p1-45.el9.tuxcare.els5 x86_64 0:0.10.4-5.45.el9.tuxcare.els5 (^5\.14\.0\-((?:(?:\d{4,}|[6-9]\d{2}|5[8-9]\d|57[1-9])(?:\.\d+)*|570\.(?:\d{3,}|[7-9]\d|6[3-9])(?:\.\d+)*|570\.62\.(?:\d{2,}|[2-9])(?:\.\d+)*|570\.62\.1\.\d+(?:\.\d+)*)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:570\.62\.1)\.el9_6\.tuxcare(?:\.(?:\d{2,}|[1-9]))(?:\.els(?:\d{2,}|[7-9]))?\.(?:x86_64|i686))$) x86_64 0:5.14.0-570.62.1.el9_6.tuxcare.1.els7 0:5.14.0-570.62.1.el9_6.tuxcare.1.els7 i686|x86_64 0:2.72.0-10.el9_6.3.tuxcare.els7 0:2.72.0-10.el9_6.3.tuxcare.els7