Tuxcare Errata System 0.0.1 5.10 2026-04-16T13:01:25 Alpine Linux 3.18 Commit: b454a83a644989540ac098b293661e416f9facac Critical TuxCare License Agreement CVE-2025-54574 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 Commit: 9d043a83761220b53b60a46a29ce9b8ac820fa61 Important TuxCare License Agreement CVE-2025-32990 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 Commit: 52fc75b9bbbc73e30a2d3dd5a0d8815748cb914d Important TuxCare License Agreement CVE-2025-20128 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 Commit: f314108cbdae601750ac30a3a3eb5a203bf14d93 Critical TuxCare License Agreement CVE-2024-38428 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 Commit: b1957aedec411f151cb77032d02f078b918fd32c Important TuxCare License Agreement CVE-2025-6052 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 Commit: 0e28d76799da9097fe542de191d021907f8aa777 Important TuxCare License Agreement CVE-2025-5318 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 Commit: 387a469740be7ae97634c8ee1e7c21dc1ec56afa Critical TuxCare License Agreement CVE-2025-1861 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 Commit: 1552b472ea5e309067577039602e8f20c9a236f9 Important TuxCare License Agreement CVE-2025-7425 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 Commit: 4e65d6ac69edeaf68610af1242728e9dca5a26c2 Important TuxCare License Agreement CVE-2025-5372 CVE-2025-5987 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 2.11.8.tuxcare.els1-r0: - CVE-2025-6021 fix integer overflow in xmlBuildQName - CVE-2025-7425 avoid atype corruption in tree.c Important TuxCare License Agreement CVE-2025-6021 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 1.21.21.tuxcare.els1-r1: - CVE-2025-6297: fixed cleanup for control member with restricted directories Low TuxCare License Agreement CVE-2025-6297 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 8.2.16-r0.tuxcare.els2-r0: - CVE-2025-1735 fix pgsql escaping no error checks - CVE-2025-1736 fix http header check of crlf Important TuxCare License Agreement CVE-2025-1735 CVE-2025-1736 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 2.6.11.tuxcare.els1-r0: - CVE-2025-2704 fix handling of corrupted TLS-crypt-v2 packets in early handshake Low TuxCare License Agreement CVE-2025-2704 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 1.9.13_p3.tuxcare.els1-r0: - CVE-2025-32462 fix -h flag bypassing RunAs, allowing root execution Important TuxCare License Agreement CVE-2025-32462 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 3.8.4.tuxcare.els2-r0: - CVE-2025-32988 GNUTLS-SA-2025-07-07-2 Important TuxCare License Agreement CVE-2025-32988 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 5.9.tuxcare.els2-r0: - CVE-2025-62168 fix proxy auth data exposure in error pages Important TuxCare License Agreement CVE-2025-62168 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 8.2.16.tuxcare.els3-r0: - CVE-2025-14177 fix information leak of memory - CVE-2025-14178 fix heap buffer overflow in array_merge() by preventing integer overflow - CVE-2025-14180 fix PDO quoting result null dereference Important TuxCare License Agreement CVE-2025-14180 CVE-2025-14177 CVE-2025-14178 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 3.1.8.tuxcare.els1-r0: - CVE-2025-15467 - CVE-2025-69419 - CVE-2025-69421 Critical TuxCare License Agreement CVE-2025-15467 CVE-2025-69419 CVE-2025-69421 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 2.4.4.tuxcare.els1-r0: - CVE-2025-68973 Important TuxCare License Agreement CVE-2025-68973 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 2.6.11.tuxcare.els2-r0: - CVE-2025-13086 fix Improper validation of source IP addresses resulting in DOS Important TuxCare License Agreement CVE-2025-13086 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 2.11.8.tuxcare.els2-r0: - CVE-2025-49794: fix use-after-free in schematron sch:name processing - CVE-2025-49796: fix type confusion in schematron sch:name processing Critical TuxCare License Agreement CVE-2025-49796 CVE-2025-49794 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 2.76.6.tuxcare.els2-r0: - CVE-2025-14087 Critical TuxCare License Agreement CVE-2025-14087 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 8.12.1.tuxcare.els1-r0: - CVE-2025-13034 - CVE-2025-14819 - CVE-2025-15079 Low TuxCare License Agreement CVE-2025-15079 CVE-2025-13034 CVE-2025-14819 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 8.12.1.tuxcare.els2-r0: - CVE-2025-14524 Low TuxCare License Agreement CVE-2025-14524 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 2.7.0.tuxcare.els1-r0: - CVE-2026-25210 fix integer overflow check for tag buffer reallocation Important TuxCare License Agreement CVE-2026-25210 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 8.12.1.tuxcare.els3-r0: - CVE-2026-3783 - CVE-2026-3784 Moderate TuxCare License Agreement CVE-2026-3783 CVE-2026-3784 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 0.10.5.tuxcare.els3-r0: - CVE-2026-3731 fix out-of-bound read from sftp extensions Important TuxCare License Agreement CVE-2026-3731 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 5.9.tuxcare.els3-r0: - CVE-2023-46848 fix signed-to-unsigned cast in URI percent-encoding Important TuxCare License Agreement CVE-2023-46848 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 5.9.tuxcare.els4-r0: - CVE-2026-33526 fix double URI escaping in ICP error path - CVE-2026-33515 fix ICP packet size and URL validation - CVE-2026-32748 fix HttpRequest lifetime for ICP v3 queries Low TuxCare License Agreement CVE-2026-33526 CVE-2026-32748 CVE-2026-33515 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 7.1.1.13.tuxcare.els3-r0: - CVE-2026-25986 heap buffer overflow in YUV 4:2:2 pixel-pair loop - CVE-2026-25968 stack buffer overflow in MSL opacity attribute parser Critical TuxCare License Agreement CVE-2026-25986 CVE-2026-25968 CVE-2026-25987 CVE-2026-25971 CVE-2026-25983 CVE-2026-25898 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 7.1.1.13.tuxcare.els6-r0: - CVE-2026-25799 - CVE-2026-25965 - CVE-2026-25967 - CVE-2026-25969 - CVE-2026-25970 - CVE-2026-25988 - CVE-2026-26066 - CVE-2026-26283 Important TuxCare License Agreement CVE-2026-25970 CVE-2026-25799 CVE-2026-25967 CVE-2026-26283 CVE-2026-25988 CVE-2026-25969 CVE-2026-25965 CVE-2026-26066 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 7.1.1.13.tuxcare.els5-r0: - CVE-2025-55154 - CVE-2025-55212 - CVE-2025-57803 - CVE-2025-62171 - CVE-2025-68618 - CVE-2025-69204 - CVE-2026-24481 - CVE-2026-25795 - CVE-2026-25796 - CVE-2026-25798 Important TuxCare License Agreement CVE-2025-62171 CVE-2026-25795 CVE-2025-55212 CVE-2025-57803 CVE-2026-24481 CVE-2026-25796 CVE-2025-69204 CVE-2025-55154 CVE-2026-25798 CVE-2025-68618 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 7.1.1.13.tuxcare.els7: - CVE-2026-27798 - CVE-2026-30883 - CVE-2026-30929 Important TuxCare License Agreement CVE-2026-30883 CVE-2026-27798 CVE-2026-30929 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 2.40.tuxcare.els1-r0: - CVE-2025-11082 Important TuxCare License Agreement CVE-2025-11082 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 0.10.5.tuxcare.els4-r0: - CVE-2026-0968 fix null pointer dereference and out-of-bounds read in sftp_parse_longname Low TuxCare License Agreement CVE-2026-0968 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 7.1.1.13.tuxcare.els4-r0: - CVE-2025-53014 - CVE-2025-53101 - CVE-2025-55298 - CVE-2025-57807 - CVE-2026-22770 - CVE-2026-23876 - CVE-2026-25897 - CVE-2026-26284 - CVE-2025-53019 Critical TuxCare License Agreement CVE-2025-57807 CVE-2026-25897 CVE-2025-53101 CVE-2026-26284 CVE-2025-53014 CVE-2025-55298 CVE-2026-23876 CVE-2026-22770 CVE-2025-53019 cpe:/o:alpinelinux:alpine_linux:3.18 Alpine Linux 3.18 7.1.1.13.tuxcare.els8: - CVE-2026-32636 Important TuxCare License Agreement CVE-2026-32636 cpe:/o:alpinelinux:alpine_linux:3.18 /etc/els-release Alpine Linux 3\.18 \(ELS by TuxCare\) 1 squid squid-doc squid-lang-af squid-lang-ar squid-lang-az squid-lang-bg squid-lang-ca squid-lang-cs squid-lang-da squid-lang-de squid-lang-el squid-lang-es squid-lang-et squid-lang-fa squid-lang-fi squid-lang-fr squid-lang-he squid-lang-hu squid-lang-hy squid-lang-id squid-lang-it squid-lang-ja squid-lang-ka squid-lang-ko squid-lang-lt squid-lang-lv squid-lang-ms squid-lang-nl squid-lang-oc squid-lang-pl squid-lang-pt squid-lang-ro squid-lang-ru squid-lang-sk squid-lang-sl squid-lang-spq squid-lang-sr squid-lang-sv squid-lang-th squid-lang-tr squid-lang-uk squid-lang-uz squid-lang-vi squid-lang-zh gnutls gnutls-c++ gnutls-dev gnutls-doc gnutls-utils clamav clamav-clamdscan clamav-daemon clamav-daemon-openrc clamav-db clamav-dev clamav-doc clamav-libs clamav-libunrar clamav-milter clamav-scanner freshclam freshclam-openrc wget wget-doc glib glib-bash-completion glib-dev glib-doc glib-lang glib-static libssh libssh-dev php82 php82-apache2 php82-bcmath php82-bz2 php82-calendar php82-cgi php82-common php82-ctype php82-curl php82-dba php82-dev php82-doc php82-dom php82-embed php82-enchant php82-exif php82-ffi php82-fileinfo php82-fpm php82-ftp php82-gd php82-gettext php82-gmp php82-iconv php82-imap php82-intl php82-ldap php82-litespeed php82-mbstring php82-mysqli php82-mysqlnd php82-odbc php82-opcache php82-openssl php82-pcntl php82-pdo php82-pdo_dblib php82-pdo_mysql php82-pdo_odbc php82-pdo_pgsql php82-pdo_sqlite php82-pear php82-pgsql php82-phar php82-phpdbg php82-posix php82-pspell php82-session php82-shmop php82-simplexml php82-snmp php82-soap php82-sockets php82-sodium php82-sqlite3 php82-sysvmsg php82-sysvsem php82-sysvshm php82-tidy php82-tokenizer php82-xml php82-xmlreader php82-xmlwriter php82-xsl php82-zip libxml2 libxml2-dev libxml2-doc libxml2-static libxml2-utils py3-libxml2 py3-libxml2-pyc dpkg dpkg-dev dpkg-doc dpkg-zsh-completion openvpn openvpn-auth-pam openvpn-dev openvpn-doc openvpn-openrc sudo sudo-dev sudo-doc libcrypto3 libssl3 openssl openssl-dev openssl-doc openssl-libs-static gnupg gnupg-dirmngr gnupg-doc gnupg-gpgconf gnupg-keyboxd gnupg-lang gnupg-scdaemon gnupg-utils gnupg-wks-client gpg gpg-agent gpg-wks-server gpgsm gpgv curl curl-dev curl-doc curl-fish-completion curl-static curl-zsh-completion libcurl expat expat-dev expat-doc expat-static libexpat imagemagick imagemagick-c++ imagemagick-dev imagemagick-doc imagemagick-libs imagemagick-perlmagick imagemagick-perlmagick-doc imagemagick-static binutils binutils-dev binutils-doc binutils-gold x86_64 5.9.tuxcare.els1-rr0 6891b131 x86_64 3.8.4.tuxcare.els1-rr1 x86_64 1.1.2.tuxcare.els1-rr0 x86_64 1.21.4.tuxcare.els1-rr0 x86_64 2.76.6.tuxcare.els1-rr0 x86_64 0.10.5.tuxcare.els1-rr0 x86_64 8.2.16.tuxcare.els1-rr0 x86_64 2.11.8.tuxcare.els1-rr0 x86_64 0.10.5.tuxcare.els2-rr0 x86_64 2.11.8.tuxcare.els1-rr3 x86_64 1.21.21.tuxcare.els1-rr1 x86_64 8.2.16.tuxcare.els2-rr0 x86_64 2.6.11.tuxcare.els1-rr0 x86_64 1.9.13_p3.tuxcare.els1-rr0 x86_64 3.8.4.tuxcare.els2-rr1 x86_64 5.9.tuxcare.els2-rr0 x86_64 8.2.16.tuxcare.els3-rr0 aarch64|x86_64 3.1.8.tuxcare.els1-rr0 aarch64|x86_64 2.4.4.tuxcare.els1-rr0 aarch64|x86_64 2.6.11.tuxcare.els2-rr0 aarch64|x86_64 2.11.8.tuxcare.els2-rr0 aarch64|x86_64 2.76.6.tuxcare.els2-rr0 aarch64|x86_64 8.12.1.tuxcare.els1-rr0 aarch64|x86_64 8.12.1.tuxcare.els2-rr0 aarch64|x86_64 2.7.0.tuxcare.els1-rr0 aarch64|x86_64 8.12.1.tuxcare.els3-rr0 aarch64|x86_64 0.10.5.tuxcare.els3-rr0 aarch64|x86_64 5.9.tuxcare.els3-rr0 aarch64|x86_64 5.9.tuxcare.els4-rr0 aarch64|x86_64 7.1.1.13.tuxcare.els3-rr0 aarch64|x86_64 7.1.1.13.tuxcare.els6-rr0 aarch64|x86_64 7.1.1.13.tuxcare.els5-rr0 aarch64|x86_64 7.1.1.13.tuxcare.els7-rr0 aarch64|x86_64 2.40.tuxcare.els1-rr0 aarch64|x86_64 0.10.5.tuxcare.els4-rr0 aarch64|x86_64 7.1.1.13.tuxcare.els4-rr0 aarch64|x86_64 7.1.1.13.tuxcare.els8-rr0