Tuxcare Errata System 0.0.1 5.10 2026-04-15T23:11:59 Community Enterprise Operating System 8 - CVE-2021-4034: polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector Important TuxCare License Agreement CVE-2021-4034 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-4115: file decriptor leak due to incorrect handling of async streams in src/polkit/polkitsystembusname.c Moderate TuxCare License Agreement CVE-2021-4115 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-4122: fix possible attacks against data confidentiality through LUKS2 online reencryption extension crash recovery. Low TuxCare License Agreement CVE-2021-4122 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-44142: Fix out-of-bounds heap read/write vulnerability in VFS module vfs_fruit (rhbz#2046152) Important TuxCare License Agreement CVE-2021-44142 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-25717: Fix username map script regression (rhbz#2046174) - Fix possible segfault while joining a domain (rhbz#2046160) Important TuxCare License Agreement CVE-2020-25717 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-45444: do not expand PROMPT_SUBST within argument of prompt-expansion sequences such as file.file to avoid arbitrary code execution Important TuxCare License Agreement CVE-2021-45444 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-3521: RPM does not require subkeys to have a valid binding signature Low TuxCare License Agreement CVE-2021-3521 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-25220: fix possible cache poisoning from forwarder responses Important TuxCare License Agreement CVE-2021-25220 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-25219: fix possible performance degradation by disabling lame-ttl cache Moderate TuxCare License Agreement CVE-2021-25219 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-26691: Fix authorization bypass when using "local" authorization Moderate TuxCare License Agreement CVE-2022-26691 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-22576: check additional SASL parameters for connection reuse Important TuxCare License Agreement CVE-2022-22576 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-27782: check additional TLS or SSH connection parameters that should have prohibited connection reuse - CVE-2022-27781: add limit of certificates which can be traversed breaking possible infinite loop - CVE-2022-27780: exclude malicious characters from url to prevent incorrect address decoding Important TuxCare License Agreement CVE-2022-27782 CVE-2022-27781 CVE-2022-27780 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-23218: stack buffer overflow in sunrpc module results in DoS - CVE-2022-23219: stack buffer overflow in sunrpc module results in DoS Critical TuxCare License Agreement CVE-2022-23218 CVE-2022-23219 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-3999: single byte buffer overflow and overflow in getcwd Low TuxCare License Agreement CVE-2021-3999 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-0778: Fix possible infinite loop in BN_mod_sqrt() Important TuxCare License Agreement CVE-2022-0778 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent command injection - CVE-2022-2068: c_rehash: Fix file operations to prevent command injection - Update expired SCT certificates Critical TuxCare License Agreement CVE-2022-1292 CVE-2022-2068 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2018-25032: zlib: A flaw found in zlib when compressing (not decompressing) certain inputs Important TuxCare License Agreement CVE-2018-25032 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-40145: Fix a double free in gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library Important TuxCare License Agreement CVE-2021-40145 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-30522: mod_sed: limit memory usage - CVE-2022-26377: mod_proxy_ajp: fix HTTP request smuggling - CVE-2022-28615: fix possible out-of-bounds read in ap_strcmp_match() - CVE-2022-30556: mod_lua: fix r:wsread() to not return length that point past the end of the storage allocated for the buffer - CVE-2022-31813: mod_proxy: preserve original request headers so an upstream knows what the original request hostname was, and so send X-Forwarded-* headers correctly Critical TuxCare License Agreement CVE-2022-26377 CVE-2022-30522 CVE-2022-30556 CVE-2022-28615 CVE-2022-31813 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-44790: mod_lua: possible buffer overflow when parsing multipart content (#2035062) Critical TuxCare License Agreement CVE-2021-44790 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-44224: possible NULL dereference or SSRF in forward proxy configurations - CVE-2021-39275: out-of-bounds write in ap_escape_quotes() via malicious input - CVE-2021-36160: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path - CVE-2021-34798: NULL pointer dereference via malformed requests Critical TuxCare License Agreement CVE-2021-36160 CVE-2021-44224 CVE-2021-34798 CVE-2021-39275 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-22719: mod_lua: error out if lua_read_body() or lua_write_body() fail - CVE-2022-22720: simpler connection close logic if discarding the request body fails - CVE-2022-22721: make sure and check that LimitXMLRequestBody fits in system memory - CVE-2022-23943: mod_sed: use size_t to allow for larger buffer sizes and unsigned arithmetics and refactor logic flow of set_write_output() to avoid out-of-bounds write Critical TuxCare License Agreement CVE-2022-23943 CVE-2022-22719 CVE-2022-22721 CVE-2022-22720 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-35452: mod_auth_digest: fix a single zero byte stack overflow (#1968278) - CVE-2021-33193: fix request splitting via HTTP/2 method injection and mod_proxy (#1972491) Important TuxCare License Agreement CVE-2021-33193 CVE-2020-35452 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - ELS-190: Fix undefined reference to PROXY_SHOULD_PING_100_CONTINUE in ap_proxy_create_hdrbrgd that occured in httpd-2.4.37-CVE-2022-31813.patch. Important TuxCare License Agreement CVE-2020-13950 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-21708: move releasing of zval, so it is released only after assignment of a new zval Critical TuxCare License Agreement CVE-2021-21708 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-21703: fix oob R/W in root process leading to privelege escalation Important TuxCare License Agreement CVE-2021-21703 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-21705: Fix SSRF bypass in FILTER_VALIDATE_URL adding additional check ups Moderate TuxCare License Agreement CVE-2021-21705 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-31626: php: password of excessive length triggers buffer overflow leading to RCE - CVE-2022-31625: don't free uninitialized parameters that have led to RCE Critical TuxCare License Agreement CVE-2022-31626 CVE-2022-31625 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-24903: fix potential buffer overrun when using octet-counted framing Low TuxCare License Agreement CVE-2022-24903 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type() in stabs.c Important TuxCare License Agreement CVE-2021-45078 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-3975: Fix a use-after-free flaw which can be triggered during VM shutdown Moderate TuxCare License Agreement CVE-2021-3975 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 Moderate TuxCare License Agreement CVE-2022-21360 CVE-2022-21296 CVE-2022-21305 CVE-2022-21294 CVE-2022-21283 CVE-2022-21341 CVE-2022-21248 CVE-2022-21282 CVE-2022-21293 CVE-2022-21340 CVE-2022-21365 CVE-2022-21299 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u332-b09. That fixes following CVEs: - CVE-2022-21476: Defective secure validation in Apache Santuario - CVE-2022-21496: URI parsing inconsistencies - CVE-2022-21434: Improper object-to-string conversion in AnnotationInvocationHandler - CVE-2022-21426: Unbounded memory allocation when compiling crafted XPath expressions - CVE-2022-21443: Missing check for negative ObjectIdentifier - Remove patch files from previous change due to their presence in newer versions Important TuxCare License Agreement CVE-2022-21426 CVE-2022-21476 CVE-2022-21443 CVE-2022-21496 CVE-2022-21434 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 Important TuxCare License Agreement CVE-2021-27212 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 Critical TuxCare License Agreement CVE-2022-29155 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-41617: add missing initgroups() required before setresgid() Important TuxCare License Agreement CVE-2021-41617 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-28116: Fix out of bound access when processing WCCPv2 messages Moderate TuxCare License Agreement CVE-2021-28116 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2018-25032: Fix an out-of-bounds access flaw leading to memory corruption when input has many distant matches Important TuxCare License Agreement CVE-2018-25032 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-23017: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name Critical TuxCare License Agreement CVE-2021-23017 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-3618: drop the connection after reaching the specified number of invalid protocol commmands Important TuxCare License Agreement CVE-2021-3618 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-3733: urllib: Regular expression DoS in AbstractBasicAuthHandler (rhbz#2047376) - CVE-2021-3737: urllib: HTTP client possible infinite loop on a 100 Continue response (rhbz#2047376) - CVE-2021-4189: ftplib should not use the host from the PASV response (rhbz#2047376) - CVE-2022-0391: urllib.parse does not sanitize URLs containing ASCII newline and tabs (rhbz#2047376) Important TuxCare License Agreement CVE-2021-4189 CVE-2021-3737 CVE-2021-3733 CVE-2022-0391 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2015-20107: mailcap: findmatch() function does not sanitise the second argument allowing to inject shell commands Critical TuxCare License Agreement CVE-2015-20107 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-23308: fix use-after-free of ID and IDREF attributes Important TuxCare License Agreement CVE-2022-23308 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-29824: fix integer overflows in xmlBuf and xmlBuffer Moderate TuxCare License Agreement CVE-2022-29824 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-23302: remove JMSSink component entrirely - CVE-2022-23305: ensure security of JDBCAppender adding additional check-ups - CVE-2022-23307: restrict chainsaw access list to classes from SYSTEM_ALLOWED_CLASSES group - CVE-2021-4104: disable JMSAppender by default and add option to manually enable it Critical TuxCare License Agreement CVE-2022-23305 CVE-2022-23307 CVE-2021-4104 CVE-2022-23302 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Rebuilt for tuxcare.els Critical TuxCare License Agreement CVE-2022-0547 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - lib/iov_iter: initialize "flags" in new pipe_buffer (Max Kellermann) {CVE-2022-0847} Important TuxCare License Agreement CVE-2022-0847 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - udf: Restore i_lenAlloc when inode expansion fails (Jan Kara) {CVE-2022-0617} - udf: Fix NULL ptr deref when converting from inline format (Jan Kara) {CVE-2022-0617} - Bluetooth: fix use-after-free error in lock_sock_nested() (Wang ShaoBo) {CVE-2021-3752} - vt_kdsetmode: extend console locking (Linus Torvalds) {CVE-2021-3753} - fget: check that the fd still exists after getting a ref to it (Linus Torvalds) {CVE-2021-4083} - ipv6: use prandom_u32() for ID generation (Willy Tarreau) {CVE-2021-45485} - virtio_console: Assure used length from device is limited (Xie Yongji) {CVE-2021-38160} - bpf: Fix integer overflow in prealloc_elems_and_freelist() (Tatsuhiko Yasumatsu) {CVE-2021-41864} - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o) {CVE-2021-40490} - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) {CVE-2021-26930} - bpf, x86: Validate computation of branch displacements for x86-32 (Piotr Krysiuk) {CVE-2021-29154} - bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk) {CVE-2021-29154} - tipc: improve size validations for received domain records (Jon Paul Maloy) {CVE-2022-0435} - cgroup: verify that source is a string (Christian Brauner) {CVE-2021-4154} Important TuxCare License Agreement CVE-2021-3753 CVE-2021-3752 CVE-2020-27170 CVE-2021-4154 CVE-2021-40490 CVE-2021-45485 CVE-2021-38160 CVE-2021-41864 CVE-2021-4083 CVE-2022-0435 CVE-2021-29154 CVE-2021-26930 CVE-2022-0617 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - net: qrtr: fix another OOB Read in qrtr_endpoint_post {CVE-2021-3743} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - esp: Fix possible buffer overflow in ESP transformation {CVE-2022-27666} - sock: remove one redundant SKB_FRAG_PAGE_ORDER macro - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} Important TuxCare License Agreement CVE-2022-27666 CVE-2021-3612 CVE-2020-13974 CVE-2021-3743 CVE-2021-4157 CVE-2022-1011 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - tipc: improve size validations for received domain records (Jon Maloy) {CVE-2022-0435} Important TuxCare License Agreement CVE-2021-20321 CVE-2021-4155 CVE-2022-0185 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-3737: urllib: HTTP client possible infinite loop on a 100 Continue response (rhbz#2036020) - CVE-2021-4189: ftplib should not use the host from the PASV response (rhbz#2036020) - CVE-2022-0391: urllib.parse does not sanitize URLs containing ASCII newline and tabs (rhbz#2047376) Important TuxCare License Agreement CVE-2021-4189 CVE-2021-3737 CVE-2022-0391 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2015-20170: mailcap: findmatch() function does not sanitise the second argument allowing to inject shell commands Critical TuxCare License Agreement CVE-2015-20107 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-24407: Fix failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands (rhbz#2055846) Important TuxCare License Agreement CVE-2022-24407 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-1271: Fix arbitrary file override with crafted file names Low TuxCare License Agreement CVE-2022-1271 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-33515: fix possible command injection by stopping reading commands when input was locked by the STARTTLS command Moderate TuxCare License Agreement CVE-2021-33515 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-24070: fix use-after-free of object-pools when used as httpd module Important TuxCare License Agreement CVE-2022-24070 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-27774: fix credential leak on redirect - CVE-2022-27776: fix auth/cookie leak on redirect Moderate TuxCare License Agreement CVE-2022-27776 CVE-2022-27774 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-46784: Fix DoS when processing gopher server responses Low TuxCare License Agreement CVE-2021-46784 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-30550: fix handling passdbs with identical driver/args but different mechanisms/username_filter Important TuxCare License Agreement CVE-2022-30550 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u342-b07. That fixes following CVEs: - CVE-2022-34169: Integer truncation issue in Xalan-J - CVE-2022-21540: Class compilation issue - CVE-2022-21541: Improper restriction of MethodHandle.invokeBasic() - Update tzdata requirement to 2022a to match JDK-8283350 - Remove patch for MakeBase.gmk cause issue was fixed in sources - Correct parameters passing to CheckVendor test Critical TuxCare License Agreement CVE-2022-21541 CVE-2022-21540 CVE-2022-34169 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-2097: Fix AES OCB encrypt/decrypt for x86 AES-NI Important TuxCare License Agreement CVE-2022-2097 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames() - CVE-2022-22822: Fix integer overflow in addBinding() - CVE-2022-22823: Fix integer overflow in build_model() - CVE-2022-22824: Fix integer overflow in defineAttribute() - CVE-2022-22825: Fix integer overflow in lookup() - CVE-2022-22826: Fix integer overflow in nextScaffoldPart() - CVE-2022-22827: Fix integer overflow in storeAtts() - CVE-2022-23852: Fix integer overflow in XML_GetBuffer() - CVE-2021-46143: Fix integer overflow on m_groupSize in doProlog() - CVE-2021-45960: Fix troublesome left shifts in storeAtts() - CVE-2022-23990: Fix integer overflow in doProlog() - CVE-2022-25313: Fix stack exhaustion in build_model() - CVE-2022-25314: Fix integer overflow in copyString() Critical TuxCare License Agreement CVE-2022-25236 CVE-2022-22825 CVE-2021-46143 CVE-2021-45960 CVE-2022-25314 CVE-2022-22823 CVE-2022-23990 CVE-2022-22824 CVE-2022-23852 CVE-2022-25315 CVE-2022-22826 CVE-2022-25313 CVE-2022-22822 CVE-2022-25235 CVE-2022-22827 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate() Critical TuxCare License Agreement CVE-2022-37434 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-29154: fix arbitrary file write vulnerability via malicious rysnc server (MITM attack) Important TuxCare License Agreement CVE-2022-29154 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with inflate() Critical TuxCare License Agreement CVE-2022-37434 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-37451: fix invalid free in pam_converse() Important TuxCare License Agreement CVE-2022-37451 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-29154: refactoring due to broken command line arguments parsing Important TuxCare License Agreement CVE-2022-29154 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-35252: fix buffer overflow Moderate TuxCare License Agreement CVE-2022-34903 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-32208: krb5: fix returning error on decode errors - CVE-2022-32206: content_encoding: return error on too many compression steps - fix a curl.spec's comment about applying TuxCare ELS patches - improve the test system by repeating failed tests several times Moderate TuxCare License Agreement CVE-2022-32206 CVE-2022-32208 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-28861: fix redirection vulnerability in http.server - fix tests to be compatible with expat 2.2.5 Important TuxCare License Agreement CVE-2021-28861 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-2526: use unref the DnsStream in callbacks correctly Important TuxCare License Agreement CVE-2022-2526 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-40674: Ensure raw tagnames are safe exiting internalEntityParser Critical TuxCare License Agreement CVE-2022-40674 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-2795: fix possible resolver performance degradation when processing large delegations - CVE-2022-38177: fix memory leak in ECDSA DNSSEC verification code - CVE-2022-38178: fix memory leak in EdDSA DNSSEC verification code Important TuxCare License Agreement CVE-2022-38178 CVE-2022-2795 CVE-2022-38177 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-20223: prevent fts5 tokenizer unicode61 from considering '\0' to be a token characters, even if other characters of class "Cc" are. - CVE-2020-35525: fix a potential null pointer dereference. Critical TuxCare License Agreement CVE-2021-20223 CVE-2020-35525 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-13435: try to prevent a recurrence of problems additionally Moderate TuxCare License Agreement CVE-2020-13435 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-41318: Fix buffer-over-read in SSPI and SMB authentication Important TuxCare License Agreement CVE-2022-41318 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-43680: Fix overeager DTD destruction Important TuxCare License Agreement CVE-2022-43680 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u352-b08. That fixes following CVEs: - CVE-2022-21619: Improper handling of long NTLM client hostnames - CVE-2022-21624: Insufficient randomization of JNDI DNS port numbers - CVE-2022-21626: Excessive memory allocation in X.509 certificate parsing - CVE-2022-21628: HttpServer no connection count limit - Update tzdata requirement to 2022c to match JDK-8292579 - Adapt rh1860986-disable_tlsv1.3_in_fips_mode.patch to new sources - Improve security properties test to check both enabled and disabled behaviour - Add test to ensure timezones can be translated Moderate TuxCare License Agreement CVE-2022-21619 CVE-2022-21624 CVE-2022-21628 CVE-2022-21626 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-35527: fix a problem with ALTER TABLE for views that have a nested FROM clause. Critical TuxCare License Agreement CVE-2020-35527 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-35527: fix a problem with ALTER TABLE for views that have a nested FROM clause. Critical TuxCare License Agreement CVE-2020-35527 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-35737: fix a buffer overflow Important TuxCare License Agreement CVE-2022-35737 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-16156: fix signature verification bypass Important TuxCare License Agreement CVE-2020-16156 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-37454: Fix buffer overflow in the Keccak XKCP SHA-3 reference implementation - CVE-2022-31630: Fix OOB read due to insufficient input validation in imageloadfont() - CVE-2021-21707: Fix improper handlig of special character which breaks path in xml parsing Critical TuxCare License Agreement CVE-2021-21707 CVE-2022-37454 CVE-2022-31630 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-1271: Fix arbitrary file write vulnerability in xzgrep utility Important TuxCare License Agreement CVE-2022-1271 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-32742: Fix server memory information leak via SMB1 Moderate TuxCare License Agreement CVE-2022-32742 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2016-3709: back to URI escape in server side includes Moderate TuxCare License Agreement CVE-2016-3709 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-28614: handle large writes in ap_rputs() - CVE-2022-29404: use a liberal default limit for LimitRequestBody of 1GB Important TuxCare License Agreement CVE-2022-29404 CVE-2022-28614 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-41741: fix memory corruption in the ngx_http_mp4_module - CVE-2022-41742: fix memory disclosure in the ngx_http_mp4_module Important TuxCare License Agreement CVE-2022-41741 CVE-2022-41742 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-0897: nwfilter: fix crash when counting number of network filters Moderate TuxCare License Agreement CVE-2022-0897 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-45061: Fix quadratic time idna decoding Important TuxCare License Agreement CVE-2022-45061 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-45061: Fix quadratic time idna decoding - fix tests to be compatible with expat 2.2.5 Important TuxCare License Agreement CVE-2022-45061 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-45063: improve error recovery when setting a bitmap font for the VT100 window - Add NULL pointer checks in x_strcasecmp() and x_strncasecmp() to help with error recovery for a missing font Critical TuxCare License Agreement CVE-2022-45063 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update to MySQL 8.0.30 - CVEs fixed: CVE-2021-2478 CVE-2021-2479 CVE-2021-2481 CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591 CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607 CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35622 CVE-2021-35623 CVE-2021-35624 CVE-2021-35625 CVE-2021-35626 CVE-2021-35627 CVE-2021-35628 CVE-2021-35630 CVE-2021-35631 CVE-2021-35632 CVE-2021-35633 CVE-2021-35634 CVE-2021-35635 CVE-2021-35636 CVE-2021-35637 CVE-2021-35638 CVE-2021-35639 CVE-2021-35640 CVE-2021-35641 CVE-2021-35642 CVE-2021-35643 CVE-2021-35644 CVE-2021-35645 CVE-2021-35646 CVE-2021-35647 CVE-2021-35648 CVE-2022-21245 CVE-2022-21249 CVE-2022-21253 CVE-2022-21254 CVE-2022-21256 CVE-2022-21264 CVE-2022-21265 CVE-2022-21270 CVE-2022-21278 CVE-2022-21297 CVE-2022-21301 CVE-2022-21302 CVE-2022-21303 CVE-2022-21304 CVE-2022-21339 CVE-2022-21342 CVE-2022-21344 CVE-2022-21348 CVE-2022-21351 CVE-2022-21352 CVE-2022-21358 CVE-2022-21362 CVE-2022-21367 CVE-2022-21368 CVE-2022-21370 CVE-2022-21372 CVE-2022-21374 CVE-2022-21378 CVE-2022-21379 CVE-2022-21412 CVE-2022-21413 CVE-2022-21414 CVE-2022-21415 CVE-2022-21417 CVE-2022-21418 CVE-2022-21423 CVE-2022-21425 CVE-2022-21427 CVE-2022-21435 CVE-2022-21436 CVE-2022-21437 CVE-2022-21438 CVE-2022-21440 CVE-2022-21444 CVE-2022-21451 CVE-2022-21452 CVE-2022-21454 CVE-2022-21455 CVE-2022-21457 CVE-2022-21459 CVE-2022-21460 CVE-2022-21462 CVE-2022-21478 CVE-2022-21479 CVE-2022-21509 CVE-2022-21515 CVE-2022-21517 CVE-2022-21522 CVE-2022-21525 CVE-2022-21526 CVE-2022-21527 CVE-2022-21528 CVE-2022-21529 CVE-2022-21530 CVE-2022-21531 CVE-2022-21534 CVE-2022-21537 CVE-2022-21538 CVE-2022-21539 CVE-2022-21547 CVE-2022-21553 CVE-2022-21556 CVE-2022-21569 Important TuxCare License Agreement CVE-2022-21452 CVE-2022-21438 CVE-2022-21436 CVE-2022-21462 CVE-2022-21423 CVE-2022-21413 CVE-2022-21517 CVE-2022-21537 CVE-2022-21478 CVE-2021-35625 CVE-2022-21534 CVE-2022-21418 CVE-2022-21414 CVE-2022-21412 CVE-2022-21415 CVE-2022-21253 CVE-2021-35575 CVE-2021-35643 CVE-2022-21455 CVE-2022-21451 CVE-2022-21444 CVE-2022-21374 CVE-2022-21351 CVE-2021-35647 CVE-2022-21367 CVE-2022-21278 CVE-2021-35604 CVE-2021-35607 CVE-2021-35591 CVE-2022-21454 CVE-2021-35610 CVE-2022-21368 CVE-2022-21379 CVE-2022-21352 CVE-2022-21348 CVE-2022-21342 CVE-2021-35622 CVE-2021-35546 CVE-2021-35612 CVE-2021-2478 CVE-2021-35638 CVE-2021-35641 CVE-2022-21245 CVE-2021-35646 CVE-2021-35624 CVE-2021-35596 CVE-2021-35602 CVE-2022-21457 CVE-2022-21460 CVE-2022-21530 CVE-2022-21529 CVE-2022-21538 CVE-2022-21547 CVE-2022-21425 CVE-2022-21479 CVE-2021-35632 CVE-2021-35631 CVE-2021-35627 CVE-2021-35623 CVE-2021-35642 CVE-2021-35637 CVE-2021-35597 CVE-2021-35648 CVE-2021-35644 CVE-2021-35630 CVE-2021-35634 CVE-2022-21264 CVE-2022-21270 CVE-2022-21265 CVE-2022-21301 CVE-2022-21254 CVE-2022-21249 CVE-2022-21525 CVE-2022-21372 CVE-2022-21531 CVE-2022-21515 CVE-2022-21378 CVE-2022-21339 CVE-2022-21526 CVE-2022-21528 CVE-2022-21553 CVE-2022-21427 CVE-2022-21437 CVE-2021-35633 CVE-2021-2481 CVE-2022-21509 CVE-2022-21527 CVE-2022-21556 CVE-2022-21522 CVE-2022-21440 CVE-2022-21435 CVE-2022-21417 CVE-2022-21370 CVE-2021-35608 CVE-2022-21569 CVE-2022-21539 CVE-2022-21459 CVE-2022-21358 CVE-2022-21362 CVE-2022-21303 CVE-2022-21304 CVE-2021-2479 CVE-2022-21344 CVE-2022-21302 CVE-2022-21297 CVE-2022-21256 CVE-2021-35628 CVE-2021-35645 CVE-2021-35636 CVE-2021-35626 CVE-2021-35640 CVE-2021-35635 CVE-2021-35639 CVE-2021-35577 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-40303: fix integer overflows with XML_PARSE_HUGE - CVE-2022-40304: fix dict corruption caused by entity reference cycles Important TuxCare License Agreement CVE-2022-40304 CVE-2022-40303 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-42898: Fix integer overflows in PAC parsing - A test-suite was enabled Moderate TuxCare License Agreement CVE-2022-42898 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-32221: fix issue when POST following PUT confusion - fix the contents of some test suites: replace the unsupported variable TESTNUMBER with a real value Critical TuxCare License Agreement CVE-2022-32221 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-35939: validate intermediate symlinks during installation - CVE-2021-35938: set file metadata via fd-based ops for everything but symlinks - Fix file descriptor leak recently introduced in rpmPackageFilesInstall() Moderate TuxCare License Agreement CVE-2021-35939 CVE-2021-35938 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-3821: fix off-by-one buffer overflow in format_timespan() Moderate TuxCare License Agreement CVE-2022-3821 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-36760: mod_proxy_ajp: fix possible HTTP request smuggling Critical TuxCare License Agreement CVE-2022-36760 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-22809: do not permit editor arguments to include "--" Important TuxCare License Agreement CVE-2023-22809 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u362-b09. That fixes following CVEs: - CVE-2023-21830: Improper restrictions in CORBA deserialization (Serialization, 8285021) - CVE-2023-21843: Soundbank URL remote loading (Sound, 8293742) - Update tzdata requirement to 2022g to match JDK-8297804 - Update timezone translation test - Remove patches which are in upstream now - Remove the obsolete rh1163501 patch - Update patches to correspond to the current sources. Moderate TuxCare License Agreement CVE-2023-21843 CVE-2023-21830 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-0215: Fix a UAF resulting from a bug in BIO_new_NDEF - CVE-2023-0286: Fix GENERAL_NAME_cmp for x400Address Important TuxCare License Agreement CVE-2023-0286 CVE-2023-0215 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-41903: fix out-of-bounds write caused by integer overflow - CVE-2021-40330: forbid newlines in host and path - CVE-2022-39260: reject too long command line strings - CVE-2021-23521: implement size checks for .gitattributes - CVE-2023-22490: prevent arbitrary path exfiltration when using non-local transports - CVE-2023-23946: prevent git-apply from writing behind newly created symbolic links Critical TuxCare License Agreement CVE-2021-40330 CVE-2022-41903 CVE-2022-23521 CVE-2023-22490 CVE-2023-23946 CVE-2022-39260 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-34480: nss: fix using of uninitialized pointer in lg_init Important TuxCare License Agreement CVE-2022-34480 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-48303: check for the end of field after leading byte (0x80 or 0xff) of base-256 encoded header value. Important TuxCare License Agreement CVE-2022-48303 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-37436: mod_proxy: HTTP response splitting - CVE-2006-20001: mod_dav: out-of-bounds read/write Important TuxCare License Agreement CVE-2022-37436 CVE-2006-20001 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-24329: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character Important TuxCare License Agreement CVE-2023-24329 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-4415: coredump: do not allow user to access coredumps with changed uid/gid/capabilities Moderate TuxCare License Agreement CVE-2022-4415 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-24329: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character Important TuxCare License Agreement CVE-2023-24329 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-38023: avoid weak rc4-hmac encryption algorithm for the Netlogon RPC Important TuxCare License Agreement CVE-2022-38023 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-25690: HTTP request splitting with mod_rewrite and mod_proxy - CVE-2023-27522: mod_proxy_uwsgi: HTTP response splitting Critical TuxCare License Agreement CVE-2023-27522 CVE-2023-25690 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-23916: fix HTTP multi-header compression denial of service - fix testing system by adding the nonewline option Important TuxCare License Agreement CVE-2023-23916 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-0567: crypt: Fix validation of malformed BCrypt hashes - CVE-2023-0568: Fix array overrun when appending slash to paths - CVE-2023-0662: Fix DoS vulnerability when parsing multipart request body Important TuxCare License Agreement CVE-2023-0568 CVE-2023-0567 CVE-2023-0662 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-26604: prevent a priveledge escalation in a pager sub-process - test_login was updated Important TuxCare License Agreement CVE-2023-26604 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-4304: fix timing based side channel in RSA decryption - CVE-2022-4450: avoid dangling pointers in PEM_read_bio_ex() Important TuxCare License Agreement CVE-2022-4304 CVE-2022-4450 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-27533: prevent TELNET option from IAC injection - CVE-2023-27535: fix behavior when FTP too eager connection reuse - CVE-2023-27536: do not reuse connections with different GSS delegations Critical TuxCare License Agreement CVE-2023-27535 CVE-2023-27533 CVE-2023-27536 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-0767: nss: improve handling of unknown PKCS#12 safe bag types Important TuxCare License Agreement CVE-2023-0767 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - secure_seq: use the 64 bits of the siphash for port offset calculation {CVE-2022-1012} Important TuxCare License Agreement CVE-2022-1012 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-3981: Fix default privileges of grub.cfg file - CVE-2022-28736: Fix use-after-free bug when grub_cmd_chainloader is executed more than once before a boot attempt is performed. - CVE-2021-3695: Drop greyscale support to fix heap out-of-bounds write - CVE-2021-3696: Fix out of range insertion into huffman table - CVE-2021-3697: Fix integer undeflow which resulted in wild pointer write - CVE-2022-28733: Fix integer underflow which resulted in subsequent unpleasantness - CVE-2022-28734: Fix erros in handling of split http headers Important TuxCare License Agreement CVE-2021-3696 CVE-2022-28733 CVE-2022-28736 CVE-2021-3697 CVE-2021-3695 CVE-2022-28734 CVE-2021-3981 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - font: Reject glyphs exceeds font->max_glyph_width or font->max_glyph height - font: Fix size overflow in grub_font_get_glyph_internal() - CVE-2022-2601: font: Fix several integer overflows in grub_font_construct_glyph() - CVE-2022-3775: font: Fix an integer underflow in blit_comb() Important TuxCare License Agreement CVE-2022-3775 CVE-2022-2601 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-27534: fix SFTP path '~' resolving discrepancy - fix read off end of array for SCP home directory case Important TuxCare License Agreement CVE-2023-27534 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - net: mpls: fix stale pointer if allocation fails during device rename {CVE-2023-26545} - net/ulp: prevent ULP without clone op from entering the LISTEN status {CVE-2023-0461} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - nfp: fix use-after-free in area_cache_get() {CVE-2022-3545} - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() {CVE-2022-3640} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - usb: mon: make mmapped memory read only {CVE-2022-43750} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - netfilter: nf_queue: do not allow packet truncation below transport header offset {CVE-2022-36946} - netfilter: nf_tables: disallow non-stateful expression in sets earlier {CVE-2022-32250} - perf: Fix sys_perf_event_open() race against self {CVE-2022-1729} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28388} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - media: em28xx: initialize refcount before kref_get {CVE-2022-3239} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE {CVE-2022-30594} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_unix: fix garbage collect vs MSG_PEEK {CVE-2021-0920} - r8152: Rate limit overflow messages {CVE-2022-3594} Important TuxCare License Agreement CVE-2022-3565 CVE-2021-0920 CVE-2022-2639 CVE-2022-36946 CVE-2022-32250 CVE-2022-28388 CVE-2022-41858 CVE-2022-45934 CVE-2022-43750 CVE-2021-3640 CVE-2022-3239 CVE-2023-1118 CVE-2023-0461 CVE-2022-1679 CVE-2022-3545 CVE-2022-20141 CVE-2022-1729 CVE-2022-3640 CVE-2022-3594 CVE-2022-30594 CVE-2022-1353 CVE-2022-28390 CVE-2023-26545 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-0464: Fix excessive resource use verifying X.509 policy constraints - CVE-2023-0466: Fix documentation of X509_VERIFY_PARAM_add0_policy() - CVE-2022-3996: Drop redundant flag setting in policy_cache_set_mapping() Important TuxCare License Agreement CVE-2023-0466 CVE-2023-0464 CVE-2022-3996 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-25652: removing a link instead of writing into - CVE-2023-29007: restrict the config file line length to parse it whole Important TuxCare License Agreement CVE-2023-29007 CVE-2023-25652 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-3634: create a separate length for session_id Moderate TuxCare License Agreement CVE-2021-3634 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-39377: fix overflow Important TuxCare License Agreement CVE-2022-39377 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-43552: smb/telnet: do not free the protocol struct in *_done() - CVE-2022-35252: cookie: reject cookies with "control bytes" Moderate TuxCare License Agreement CVE-2022-35252 CVE-2022-43552 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377 Important TuxCare License Agreement CVE-2023-33204 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-2509: Fix double free during gnutls_pkcs7_verify Important TuxCare License Agreement CVE-2022-2509 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-2928: option refcount overflow when leasequery is enabled leading to dhcpd abort - CVE-2022-2929: DHCP memory leak - Backported tests from upstream, for this and other CVE`s Moderate TuxCare License Agreement CVE-2022-2928 CVE-2022-2929 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-24765: fix safe.directory key not being checked in setup.c - CVE-2022-29178: avoid failing dir ownership check - some unstable tests were disabled Important TuxCare License Agreement CVE-2022-24765 CVE-2022-29187 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-1615: util/genrand: don't ignore errors in random number generation Moderate TuxCare License Agreement CVE-2022-1615 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - cgroup: Use open-time cgroup namespace for process migration perm checks {CVE-2021-4197} - cgroup: Use open-time credentials for process migraton perm checks {CVE-2021-4197} - vt: drop old FONT ioctls {CVE-2021-33656} - fbmem: Check virtual screen sizes in fb_set_var() {CVE-2021-33655} - fbcon: Prevent that screen size is smaller than font size {CVE-2021-33655} - fbcon: Disallow setting font bigger than screen size {CVE-2021-33655} - KVM: nVMX: add missing consistency checks for CR0 and CR4 {CVE-2023-30456} - net: usb: ax88179_178a: Fix packet receiving - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - ipv6: make exception cache less predictible {CVE-2021-20322} - ipv6: use siphash in rt6_exception_hash() {CVE-2021-20322} - ipv6: use jhash2() in rt6_exception_hash() - psi: Fix uaf issue when psi trigger is destroyed while being polled {CVE-2022-2938} - psi: fix possible trigger missing in the window - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv - cgroup: make per-cgroup pressure stall tracking configurable - netfilter: nf_tables_offload: incorrect flow offload action array size {CVE-2022-25636} - netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM {CVE-2022-42896} - devlink: Fix use-after-free after a failed reload {CVE-2022-3625} - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS {CVE-2022-2196} - net/sched: tcindex: update imperfect hash filters respecting rcu {CVE-2023-1281} - seq_buf: Fix overflow in seq_buf_putmem_hex() {CVE-2023-28772} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work {CVE-2023-1989} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg {CVE-2023-31436} - cgroup-v1: Require capabilities to set release_agent {CVE-2022-0492} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() {CVE-2022-28893} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - i2c: ismt: Fix an out-of-bounds bug in ismt_access() {CVE-2022-2873} - RDMA/cma: Do not change route.addr.src_addr.ss_family {CVE-2021-4028} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup {CVE-2022-2964} - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address {CVE-2022-1158} - ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386} Important TuxCare License Agreement CVE-2022-0492 CVE-2021-4028 CVE-2021-33655 CVE-2021-33656 CVE-2022-1055 CVE-2022-42896 CVE-2022-2964 CVE-2023-1380 CVE-2023-1513 CVE-2023-28772 CVE-2023-1989 CVE-2022-2938 CVE-2022-1158 CVE-2021-20322 CVE-2022-25636 CVE-2023-30456 CVE-2022-2873 CVE-2022-29581 CVE-2023-0386 CVE-2022-28893 CVE-2023-31436 CVE-2023-1281 CVE-2022-2196 CVE-2022-3625 CVE-2021-4197 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-31484: fix possible MITM attach due to missing SSL verification Important TuxCare License Agreement CVE-2023-31484 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-31628: Fix potential infinite recursion in phar wrapper when using quine gzip file - CVE-2022-31629: Add cookie integrity validation - CVE-2022-31631: Fix integer overflow that could cause PDO::quote() to return an improperly quoted string Moderate TuxCare License Agreement CVE-2022-31631 CVE-2022-31629 CVE-2022-31628 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-2650: Restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt will translate - Update expired smime/SM2 certificates that affect tests. Important TuxCare License Agreement CVE-2023-2650 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-28322: fix errouneous behaviour and possible use-after-free due to mess in upload/method handling - CVE-2023-28321: fix incorrect IDN wildcard match due to errouneous wildcard logic handling; drop support for wildcards in the middle of domain name - Update certificates used on test HTTPS server Moderate TuxCare License Agreement CVE-2023-28322 CVE-2023-28321 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update to MySQL 8.0.32 - CVEs fixed: CVE-2023-21912 CVE-2022-21594 CVE-2022-21599 CVE-2022-21604 CVE-2022-21608 CVE-2022-21611 CVE-2022-21617 CVE-2022-21625 CVE-2022-21632 CVE-2022-21633 CVE-2022-21637 CVE-2022-21640 CVE-2022-39400 CVE-2022-39408 CVE-2022-39410 CVE-2023-21836 CVE-2023-21863 CVE-2023-21864 CVE-2023-21865 CVE-2023-21867 CVE-2023-21868 CVE-2023-21869 CVE-2023-21870 CVE-2023-21871 CVE-2023-21873 CVE-2023-21875 CVE-2023-21876 CVE-2023-21877 CVE-2023-21878 CVE-2023-21879 CVE-2023-21880 CVE-2023-21881 CVE-2023-21883 CVE-2023-21887 CVE-2023-21917 CVE-2023-21874 CVE-2023-21882 - Removed patch for test system because it was fixed in a newer tarball Important TuxCare License Agreement CVE-2023-21876 CVE-2023-21871 CVE-2023-21877 CVE-2023-21882 CVE-2023-21880 CVE-2023-21883 CVE-2023-21917 CVE-2022-21637 CVE-2022-21599 CVE-2022-39400 CVE-2023-21912 CVE-2023-21881 CVE-2023-21865 CVE-2023-21864 CVE-2023-21836 CVE-2023-21873 CVE-2023-21878 CVE-2023-21869 CVE-2023-21875 CVE-2023-21863 CVE-2023-21868 CVE-2022-21611 CVE-2022-21625 CVE-2022-39408 CVE-2022-21617 CVE-2022-21608 CVE-2022-21633 CVE-2022-21604 CVE-2022-21640 CVE-2022-39410 CVE-2023-21887 CVE-2023-21879 CVE-2023-21870 CVE-2023-21874 CVE-2023-21867 CVE-2022-21632 CVE-2022-21594 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-24736: internally, remove all references to a Window object that belongs to an expression in an ORDER BY clause if that expression is converted to an alias of a result-set expression. Moderate TuxCare License Agreement CVE-2020-24736 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-25815: gettext: avoid using gettext if the locale dir is not present Low TuxCare License Agreement CVE-2023-25815 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u372-b07. That fixes following CVEs: - CVE-2023-21930: Improper connection handling during TLS handshake (8294474) - CVE-2023-21937: Missing string checks for NULL characters (8296622) - CVE-2023-21938: Incorrect handling of NULL characters in ProcessBuilder (8295304) - CVE-2023-21939: Swing HTML parsing issue (8296832) - CVE-2023-21954: Incorrect enqueue of references in garbage collector (8298191) - CVE-2023-21967: Certificate validation issue in TLS session negotiation (8298310) - CVE-2023-21968: Missing check for slash characters in URI-to-path conversion (8298667) - Update tzdata requirement to 2023c to match JDK-8305113 - Include JDK-8271199 fix from the upcoming jdk8u382 in advance Important TuxCare License Agreement CVE-2023-21968 CVE-2023-21930 CVE-2023-21938 CVE-2023-21939 CVE-2023-21937 CVE-2023-21967 CVE-2023-21954 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update to MySQL 8.0.33 - CVEs fixed: CVE-2023-21980 CVE-2023-21947 CVE-2023-21940 CVE-2023-21976 CVE-2023-21933 CVE-2023-21911 CVE-2023-21945 CVE-2023-21966 CVE-2023-21982 CVE-2023-21946 CVE-2023-21963 CVE-2023-21913 CVE-2023-21955 CVE-2023-21962 CVE-2023-21977 CVE-2023-21953 CVE-2023-21972 CVE-2023-21935 CVE-2023-21929 CVE-2023-21919 CVE-2023-21920 Important TuxCare License Agreement CVE-2023-21966 CVE-2023-21982 CVE-2023-21919 CVE-2023-21955 CVE-2023-21953 CVE-2023-21972 CVE-2023-21933 CVE-2023-21920 CVE-2023-21980 CVE-2023-21929 CVE-2023-21963 CVE-2023-21976 CVE-2023-21940 CVE-2023-21935 CVE-2023-21977 CVE-2023-21962 CVE-2023-21913 CVE-2023-21946 CVE-2023-21911 CVE-2023-21945 CVE-2023-21947 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-2828: fix possible DoS due to cache size limit exceed Important TuxCare License Agreement CVE-2023-2828 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-34241: Fix use-after-free for CupsAcceptClient(). Important TuxCare License Agreement CVE-2023-34241 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference Important TuxCare License Agreement CVE-2023-2953 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-31486: add verify_SSL=>1 to HTTP::Tiny default configuration Important TuxCare License Agreement CVE-2023-31486 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - ALSA: pcm: Fix races among concurrent prealloc proc writes {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent read/write and buffer changes {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls {CVE-2022-1048} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - KVM: SEV-ES: fix another issue with string I/O VMGEXITs {CVE-2021-4093} - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed {CVE-2021-4093} - KVM: SEV-ES: keep INS functions together {CVE-2021-4093} - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in {CVE-2021-4093} - KVM: x86: split the two parts of emulator_pio_in {CVE-2021-4093} - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out {CVE-2021-4093} - KVM: SEV-ES: clean up kvm_sev_es_ins/outs {CVE-2021-4093} - KVM: SEV-ES: rename guest_ins_data to sev_pio_data {CVE-2021-4093} - KVM: SEV-ES: fix length of string I/O {CVE-2021-4093} - drm/i915: fix TLB invalidation for Gen12 video and compute engines {CVE-2022-4139} - drm/i915: Flush TLBs before releasing backing store {CVE-2022-0330} - xfs: fix up non-directory creation in SGID directories {CVE-2021-4037} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - ipv6: Fix data races around sk->sk_prot. {CVE-2022-3567} - ipv6: annotate some data-races around sk->sk_prot {CVE-2022-3567} - ipv6: use indirect call wrappers for {tcp, udpv6}_{recv, send}msg() {CVE-2022-3567} - netfilter: nf_tables: deactivate anonymous set from preparation phase {CVE-2023-32233} - netfilter: nf_tables: bogus EBUSY when deleting set after flush - media: dmxdev: fix UAF when dvb_register_device() fails {CVE-2022-41218} - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock {CVE-2022-4129} - l2tp: Serialize access to sk_user_data with sk_callback_lock {CVE-2022-4129} - net: fix a concurrency bug in l2tp_tunnel_register() {CVE-2022-4129} - Bluetooth: L2CAP: Fix memory leak in vhci_write {CVE-2022-3619} - Bluetooth: L2CAP: Fix handling fragmented length - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() {CVE-2022-3628} - wifi: cfg80211: avoid nontransmitted BSS list corruption {CVE-2022-42721} - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - cfg80211: hold bss_lock while updating nontrans_list - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF {CVE-2023-0266} - ALSA: control: Drop superfluous snd_power_wait() calls - ALSA: control: Track in-flight control read/write/tlv accesses - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu {CVE-2022-3564} - netfilter: nf_conntrack_irc: Tighten matching on DCC message {CVE-2022-2663} - netfilter: nf_conntrack_irc: Fix forged IP logic {CVE-2022-2663} - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() {CVE-2022-2153} - KVM: Add infrastructure and macro to mark VM as bugged - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID {CVE-2022-1789} - tcp/udp: Fix memory leak in ipv6_renew_options(). {CVE-2022-3524} - proc: proc_skip_spaces() shouldn't think it is working on C strings {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long {CVE-2022-4378} - wifi: mac80211: fix crash in beacon protection for P2P-device {CVE-2022-42722} - net: sched: cbq: dont intepret cls results when asked to drop {CVE-2023-23454} - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames {CVE-2023-0394} - net: sched: disallow noqueue for qdisc classes {CVE-2022-47929} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - dm verity: set DM_TARGET_IMMUTABLE feature flag {CVE-2022-20572} Important TuxCare License Agreement CVE-2022-20572 CVE-2022-4139 CVE-2023-32233 CVE-2022-3628 CVE-2022-47929 CVE-2022-3566 CVE-2021-4093 CVE-2022-25265 CVE-2023-0266 CVE-2022-4129 CVE-2021-4037 CVE-2023-0394 CVE-2022-3524 CVE-2022-1789 CVE-2022-41674 CVE-2022-42722 CVE-2022-4378 CVE-2022-3028 CVE-2022-3619 CVE-2022-3564 CVE-2022-3567 CVE-2022-42721 CVE-2022-2663 CVE-2022-0330 CVE-2022-1048 CVE-2022-42720 CVE-2023-23454 CVE-2022-41218 CVE-2022-2153 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u382-b05. That fixes following CVEs: - CVE-2023-22045: Array indexing integer overflow issue. (8304468) - CVE-2023-22049: Improper handling of slash characters in URI-to-path conversion (8305312) - Remove patch for pkcs11 cause issue was fixed in sources Low TuxCare License Agreement CVE-2023-22045 CVE-2023-22049 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-2283: fix the authentication check - CVE-2023-1667: refactor the algorithm guessing to avoid NULL dereference - improve tests Moderate TuxCare License Agreement CVE-2023-1667 CVE-2023-2283 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-38408: checks libraries before dlopen and separate ssh-pkcs11-helpers for each p11 module Critical TuxCare License Agreement CVE-2023-38408 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-2127: Fix oud-of-bounds read triggered by maliciously request - CVE-2023-34966: Fix infinite loop vulnerability in mdssvc RPC service Important TuxCare License Agreement CVE-2023-34966 CVE-2022-2127 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update AMD CPU microcode to 2023-07-19 addresses CVE-2023-20593: - Addition AMD CPU microcode for processor family 17h: sig 0x008a0f00, sig 0x00830f10; - Addition AMD CPU microcode for processor family 19h: sig 0x00a00f10, sig 0x00a00f11, sig 0x00a00f12; - Update AMD CPU microcode for processor family 17h: sig 0x00800f12; Moderate TuxCare License Agreement CVE-2023-20593 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-37705: fix tar option filtering - CVE-2023-30577: introduce tar option allow list Important TuxCare License Agreement CVE-2023-30577 CVE-2022-37705 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-0361: Remove branching on secret data to avoid timing sidechannel Important TuxCare License Agreement CVE-2023-0361 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read() Low TuxCare License Agreement CVE-2023-3824 CVE-2023-3823 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-3817: Add a prior check and process only correct DH keys Moderate TuxCare License Agreement CVE-2023-3817 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - netfilter: nft_set_pipapo: fix improper element removal {CVE-2023-4004} - net: tun: fix bugs for oversize packet when napi frags enabled {CVE-2023-3812} - net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776} - net/sched: sch_qfq: account for stab overhead in qfq_enqueue {CVE-2023-3611} - net/sched: sch_qfq: refactor parsing of netlink parameters - ipvlan:Fix out-of-bounds caused by unclear skb->cb {CVE-2023-3090} - media: saa7134: fix use after free bug in saa7134_finidev due to race condition {CVE-2023-35823} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - ovl: fix use after free in struct ovl_aio_req {CVE-2023-1252} - xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037} - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-23042} - xen/netfront: don't trust the backend response data blindly - xen/netfront: disentangle tx_skb_freelist - xen: sync include/xen/interface/io/ring.h with Xen's newest version - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() {CVE-2023-35788} - rds: rds_rm_zerocopy_callback() use list_first_entry() {CVE-2023-1078} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - NFSD: Cap rsize_bop result based on send buffer size {CVE-2022-43945} - NFSD: Protect against send buffer overflow in NFSv3 READ {CVE-2022-43945} - NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945} - SUNRPC: Fix svcxdr_init_encode's buflen calculation {CVE-2022-43945} - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation {CVE-2022-43945} - mm/mremap: hold the rmap lock in write mode when moving page table entries. {CVE-2022-39189} - KVM: x86: do not report a vCPU as preempted outside instruction boundaries {CVE-2022-39189} - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() {CVE-2023-28466} - tee: handle lookup of shm with reference count 0 {CVE-2021-44733} Important TuxCare License Agreement CVE-2021-44733 CVE-2022-3424 CVE-2023-28466 CVE-2022-23042 CVE-2023-1252 CVE-2023-3141 CVE-2023-1078 CVE-2023-35824 CVE-2023-3776 CVE-2022-39189 CVE-2023-3812 CVE-2023-4004 CVE-2023-35823 CVE-2023-3090 CVE-2022-43945 CVE-2023-3611 CVE-2023-35788 CVE-2022-23037 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-48565: Reject XML entity declarations in plist files - CVE-2022-48566: Remove possible time-affected optimization Critical TuxCare License Agreement CVE-2022-48565 CVE-2022-48566 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-47673: Fix multiple out of bound reads which may cause a DoS - CVE-2022-47695: Fix NULL pointer segmentation fault which may cause a DoS - CVE-2022-47696: Fix read of unitialized field which may cause a DoS Important TuxCare License Agreement CVE-2021-46174 CVE-2022-44840 CVE-2022-47673 CVE-2022-47695 CVE-2022-47696 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case {CVE-2022-23040} - xen/xenbus: Fix granting of vmalloc'd memory - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23036} - xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23036} - xen/blkfront: don't trust the backend response data blindly - xen/blkfront: don't take local copy of a request from the ring page - xen/blkfront: read response from backend only once - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128} - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() {CVE-2022-1462} - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - mmu_gather: Force tlb-flush VM_PFNMAP vmas {CVE-2022-39188} - net/sched: cls_u32: Fix reference counter leak leading to overflow {CVE-2023-3609} - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3117} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - netfilter: nf_tables: stricter validation of element data {CVE-2022-34918} - tpm: fix reference counting for struct tpm_chip {CVE-2022-2977} - drm/virtio: Fix compile warnings (ents/nents) {CVE-2023-22998} - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling {CVE-2023-22998} - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init {CVE-2023-22998} - gfs2: Don't deref jdesc in evict {CVE-2023-3212} - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry {CVE-2022-3707} - drm/amdkfd: Check for null pointer after calling kmemdup {CVE-2022-3108} - hv_netvsc: Add check for kvmalloc_array {CVE-2022-3107} - sfc_ef100: potential dereference of null pointer {CVE-2022-3106} - RDMA/uverbs: Check for null return of kmalloc_array {CVE-2022-3105} - drm: use the lookup lock in drm_is_current_master {CVE-2022-1280} - drm: add a locked version of drm_is_current_master {CVE-2022-1280} - drm: serialize drm_file.master with a new spinlock {CVE-2022-1280} - drm/vmwgfx: fix potential UAF in vmwgfx_surface.c {CVE-2022-1280} - drm: protect drm_master pointers in drm_lease.c {CVE-2022-1280} - KVM: avoid NULL pointer dereference in kvm_dirty_ring_push {CVE-2022-1263} Important TuxCare License Agreement CVE-2022-34918 CVE-2022-45919 CVE-2022-3707 CVE-2022-1263 CVE-2022-3108 CVE-2022-1280 CVE-2023-40283 CVE-2023-3268 CVE-2022-23036 CVE-2022-23040 CVE-2022-1462 CVE-2022-3107 CVE-2022-45886 CVE-2022-39188 CVE-2023-22998 CVE-2023-3212 CVE-2023-3117 CVE-2023-3609 CVE-2023-3567 CVE-2023-4128 CVE-2023-4387 CVE-2022-3106 CVE-2022-3105 CVE-2023-2124 CVE-2022-2977 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-19726: Fix parsing a corrupt PE format file Important TuxCare License Agreement CVE-2020-19726 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-48565: Reject XML entity declarations in plist files Critical TuxCare License Agreement CVE-2022-48565 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2018-25013, CVE-2018-25014: wait for all threads to be done in DecodeRemaining - CVE-2023-1999: fix a double free error Critical TuxCare License Agreement CVE-2018-25013 CVE-2023-4863 CVE-2023-1999 CVE-2018-25014 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-3341: Limit isccc_cc_fromwire recursion depth Important TuxCare License Agreement CVE-2023-3341 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-38546: cookie: remove unnecessary struct fields Moderate TuxCare License Agreement CVE-2023-38546 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-48566: Make compare_digest more constant-time Moderate TuxCare License Agreement CVE-2022-48566 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Rebuilt with rebrand to TuxCare ELS Critical TuxCare License Agreement CVE-2023-42115 CVE-2023-42116 CVE-2023-42114 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Enable internal tests - Skip several failed tests from the check - CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - CVE-2023-32636: Fix a wrong timeout in fuzz_variant_text() - CVE-2023-32643: Fix a heap-buffer-overflow in g_variant_serialised_get_child() - Fix g_test_bug assertion in gvariant test Important TuxCare License Agreement CVE-2023-32643 CVE-2023-32665 CVE-2023-32636 CVE-2023-29499 CVE-2023-32611 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-48560: Fix SIGSEGV in Python via heappushpop in heapq Important TuxCare License Agreement CVE-2022-48560 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-48560: fix posible crash in heapq with custom comparison operators Important TuxCare License Agreement CVE-2022-48560 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-45853: Reject overflows of zip header fields in minizip Critical TuxCare License Agreement CVE-2023-45853 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-4911: Terminate if end of input is reached Important TuxCare License Agreement CVE-2023-4911 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-44487: HTTP/2 - per-iteration stream handling limit Important TuxCare License Agreement CVE-2023-44487 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-31122: mod_macro: fix out-of-bounds read vulnerability by using own strncmp function Important TuxCare License Agreement CVE-2023-31122 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-3711: Fix an incorrect buffer size calculation leads to an overflow - Check the plaintext buffer is large enough when decrypting SM2 - Add extended tests for SM2 Critical TuxCare License Agreement CVE-2021-3711 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-46846: Improve HTTP chunked encoding compliance - CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization - CVE-2023-46848: Fix userinfo percent-encoding Important TuxCare License Agreement CVE-2023-46848 CVE-2023-46847 CVE-2023-46846 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-46724: Fix validation of certificates with CN=* Important TuxCare License Agreement CVE-2023-46724 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-3961: Fix a path traversal out of the socket directory Critical TuxCare License Agreement CVE-2023-3961 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser Critical TuxCare License Agreement CVE-2022-47629 CVE-2022-3515 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-40217: Fix TLS handshake bypass Moderate TuxCare License Agreement CVE-2023-40217 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2023-23583 (INTEL-SA-00950): - Addition of 06-ba-02/0xe0 microcode at revision 0x411c; - Addition of 06-ba-02/0xe0 microcode at revision 0x411c; - Addition of 06-ba-03/0xe0 microcode (in intel-ucode/06-ba-02) at revision 0x411c; - Addition of 06-ba-02/0xe0 microcode (in intel-ucode/06-ba-03) at revision 0x411c; - Addition of 06-ba-02/0xe0 microcode (in intel-ucode/06-ba-03) at revision 0x411c; - Addition of 06-ba-03/0xe0 microcode at revision 0x411c; - Addition of 06-be-00/0x11 microcode at revision 0x12; - Removal of 06-ba-02/0xc0 microcode at revision 0x4112; - Removal of 06-ba-02/0xc0 microcode at revision 0x4112; - Removal of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at revision 0x4112; - Removal of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at revision 0x4112; - Removal of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at revision 0x4112; - Removal of 06-ba-03/0xc0 microcode at revision 0x4112; - Removal of 06-be-00/0x01 microcode at revision 0x10; - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171 up to 0x1000181; - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode from revision 0x2006f05 up to 0x2007006; - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501 up to 0x4003604; - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision 0x5003501 up to 0x5003604; - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601 up to 0x7002703; - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390 up to 0xd0003b9; - Update of 06-6c-01/0x10 microcode from revision 0x1000230 up to 0x1000268; - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba up to 0xc2; - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision 0xaa up to 0xb4; - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up to 0x34; - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up to 0x4e; - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2 up to 0xf4; - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision 0xf2 up to 0xf4; - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from revision 0xf2 up to 0xf4; - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up to 0xf4; - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode from revision 0xf6 up to 0xf8; - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-04/0x87 microcode from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-05/0x10 microcode (in intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-05/0x87 microcode (in intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-06/0x87 microcode (in intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-07/0x87 microcode (in intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-04) at revision 0x2c000290; - Addition of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-04) at revision 0x2c000290; - Removal of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-04) at revision 0x2c0001d1; - Removal of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-04) at revision 0x2c0001d1; - Addition of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-04) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-04) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-04) at revision 0x2b000461; - Removal of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-04) at revision 0x2b000461; - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-04/0x87 microcode (in intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-05/0x10 microcode from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-05/0x87 microcode from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-06/0x87 microcode (in intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-07/0x87 microcode (in intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-05) at revision 0x2c000290; - Addition of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-05) at revision 0x2c000290; - Removal of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-05) at revision 0x2c0001d1; - Removal of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-05) at revision 0x2c0001d1; - Addition of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-05) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-05) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-05) at revision 0x2b000461; - Removal of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-05) at revision 0x2b000461; - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-04/0x87 microcode (in intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-05/0x10 microcode (in intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-05/0x87 microcode (in intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-06/0x87 microcode from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-07/0x87 microcode (in intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-06) at revision 0x2c000290; - Addition of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-06) at revision 0x2c000290; - Removal of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-06) at revision 0x2c0001d1; - Removal of 06-8f-08/0x10 microcode (in intel-ucode/06-8f-06) at revision 0x2c0001d1; - Addition of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-06) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-06) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-06) at revision 0x2b000461; - Removal of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-06) at revision 0x2b000461; - Update of 06-8f-04/0x87 microcode (in intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-05/0x87 microcode (in intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-06/0x87 microcode (in intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-07/0x87 microcode from revision 0x2b000461 up to 0x2b0004d0; - Addition of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-07) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-07) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-07) at revision 0x2b000461; - Removal of 06-8f-08/0x87 microcode (in intel-ucode/06-8f-07) at revision 0x2b000461; - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-04/0x87 microcode (in intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-05/0x10 microcode (in intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-05/0x87 microcode (in intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000290; - Update of 06-8f-06/0x87 microcode (in intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004d0; - Update of 06-8f-07/0x87 microcode (in intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 microcode at revision 0x2c000290; - Addition of 06-8f-08/0x10 microcode at revision 0x2c000290; - Removal of 06-8f-08/0x10 microcode at revision 0x2c0001d1; - Removal of 06-8f-08/0x10 microcode at revision 0x2c0001d1; - Addition of 06-8f-08/0x87 microcode at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 microcode at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 microcode at revision 0x2b000461; - Removal of 06-8f-08/0x87 microcode at revision 0x2b000461; - Addition of 06-97-02/0x07 microcode at revision 0x32; - Addition of 06-97-02/0x07 microcode at revision 0x32; - Removal of 06-97-02/0x07 microcode at revision 0x2c; - Removal of 06-97-02/0x07 microcode at revision 0x2c; - Update of 06-97-05/0x07 microcode (in intel-ucode/06-97-02) from revision 0x2c up to 0x32; - Update of 06-bf-02/0x07 microcode (in intel-ucode/06-97-02) from revision 0x2c up to 0x32; - Update of 06-bf-05/0x07 microcode (in intel-ucode/06-97-02) from revision 0x2c up to 0x32; - Addition of 06-97-02/0x07 microcode (in intel-ucode/06-97-05) at revision 0x32; - Addition of 06-97-02/0x07 microcode (in intel-ucode/06-97-05) at revision 0x32; - Removal of 06-97-02/0x07 microcode (in intel-ucode/06-97-05) at revision 0x2c; - Removal of 06-97-02/0x07 microcode (in intel-ucode/06-97-05) at revision 0x2c; - Update of 06-97-05/0x07 microcode from revision 0x2c up to 0x32; - Update of 06-bf-02/0x07 microcode (in intel-ucode/06-97-05) from revision 0x2c up to 0x32; - Update of 06-bf-05/0x07 microcode (in intel-ucode/06-97-05) from revision 0x2c up to 0x32; - Addition of 06-9a-03/0x80 microcode at revision 0x430; - Addition of 06-9a-03/0x80 microcode at revision 0x430; - Removal of 06-9a-03/0x80 microcode at revision 0x42a; - Removal of 06-9a-03/0x80 microcode at revision 0x42a; - Update of 06-9a-04/0x80 microcode (in intel-ucode/06-9a-03) from revision 0x42a up to 0x430; - Addition of 06-9a-03/0x80 microcode (in intel-ucode/06-9a-04) at revision 0x430; - Addition of 06-9a-03/0x80 microcode (in intel-ucode/06-9a-04) at revision 0x430; - Removal of 06-9a-03/0x80 microcode (in intel-ucode/06-9a-04) at revision 0x42a; - Removal of 06-9a-03/0x80 microcode (in intel-ucode/06-9a-04) at revision 0x42a; - Update of 06-9a-04/0x40 microcode from revision 0x4 up to 0x5; - Update of 06-9a-04/0x80 microcode from revision 0x42a up to 0x430; - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision 0xf2 up to 0xf4; - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xf2 up to 0xf4; - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf2 up to 0xf4; - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision 0xf2 up to 0xf4; - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision 0xf8 up to 0xfa; - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up to 0xf8; - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6 up to 0xf8; - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6 up to 0xf8; - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6 up to 0xf8; - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision 0xf6 up to 0xf8; - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up to 0x5d; - Update of 06-b7-01/0x32 microcode from revision 0x113 up to 0x11d; - Addition of 06-97-02/0x07 microcode (in intel-ucode/06-bf-02) at revision 0x32; - Addition of 06-97-02/0x07 microcode (in intel-ucode/06-bf-02) at revision 0x32; - Removal of 06-97-02/0x07 microcode (in intel-ucode/06-bf-02) at revision 0x2c; - Removal of 06-97-02/0x07 microcode (in intel-ucode/06-bf-02) at revision 0x2c; - Update of 06-97-05/0x07 microcode (in intel-ucode/06-bf-02) from revision 0x2c up to 0x32; - Update of 06-bf-02/0x07 microcode from revision 0x2c up to 0x32; - Update of 06-bf-05/0x07 microcode (in intel-ucode/06-bf-02) from revision 0x2c up to 0x32; - Addition of 06-97-02/0x07 microcode (in intel-ucode/06-bf-05) at revision 0x32; - Addition of 06-97-02/0x07 microcode (in intel-ucode/06-bf-05) at revision 0x32; - Removal of 06-97-02/0x07 microcode (in intel-ucode/06-bf-05) at revision 0x2c; - Removal of 06-97-02/0x07 microcode (in intel-ucode/06-bf-05) at revision 0x2c; - Update of 06-97-05/0x07 microcode (in intel-ucode/06-bf-05) from revision 0x2c up to 0x32; - Update of 06-bf-02/0x07 microcode (in intel-ucode/06-bf-05) from revision 0x2c up to 0x32; - Update of 06-bf-05/0x07 microcode from revision 0x2c up to 0x32. Important TuxCare License Agreement CVE-2023-23583 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-46728: Remove support for Gopher protocol Important TuxCare License Agreement CVE-2023-46728 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-45539: h1: do not accept '#' as part of the URI component; h2: reject more chars from the :path pseudo header Important TuxCare License Agreement CVE-2023-45539 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management Important TuxCare License Agreement CVE-2023-49285 CVE-2023-49286 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-51385: ban user/hostnames with most shell metacharacters in command line Critical TuxCare License Agreement CVE-2023-51385 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - CVE-2023-22067: IOR deserialization issue in CORBA (fixed in jdk8u392) - CVE-2023-22081: Certificate path validation issue during client authentication (fixed in jdk8u392) - Adapt pr2462 patch to the new sources Important TuxCare License Agreement CVE-2024-20921 CVE-2023-22067 CVE-2024-20926 CVE-2024-20945 CVE-2024-20918 CVE-2024-20952 CVE-2024-20919 CVE-2023-22081 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-50269: Limit the number of allowed X-Forwarded-For hops to prevent DoS Important TuxCare License Agreement CVE-2023-50269 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - netfilter: nf_tables: reject QUEUE/DROP verdict parameters {CVE-2024-1086} - RDMA/core: Refactor rdma_bind_addr {CVE-2023-2176} - RDMA/cma: Do not change route.addr.src_addr outside state checks - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-51043} - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - net: tls, update curr on splice as well {CVE-2024-0646} - writeback: avoid use-after-free after removing device {CVE-2024-0562} - smb: client: fix OOB in receive_encrypted_standard() {CVE-2024-0565} - netfilter: nf_tables: Reject tables of unsupported family {CVE-2023-6040} - ida: Fix crash in ida_free when the bitmap is empty {CVE-2023-6915} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} Important TuxCare License Agreement CVE-2023-51043 CVE-2023-51042 CVE-2023-6915 CVE-2024-0565 CVE-2024-1086 CVE-2024-0775 CVE-2024-0646 CVE-2023-6040 CVE-2023-51780 CVE-2024-0562 CVE-2023-2176 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-7104: Fix heap-based buffer overflow in the sessionReadRecord function Important TuxCare License Agreement CVE-2023-7104 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Add CVE-2024-0567 PoC test - Remove src.rpm from sources - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack - CVE-2024-0553: minimize branching after decryption Important TuxCare License Agreement CVE-2023-5981 CVE-2024-0553 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-25062: Fix use-after-free issue in XML Reader interface Important TuxCare License Agreement CVE-2024-25062 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks Important TuxCare License Agreement CVE-2023-42465 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3 Important TuxCare License Agreement CVE-2023-50868 CVE-2023-50387 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-6004: fix the possibility of injections through a hostname parameter in the ProxyCommand/ProxyJump features - CVE-2023-6918: fix the issue when unchecked return values for digests may cause DoS Moderate TuxCare License Agreement CVE-2023-6918 CVE-2023-6004 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-25617: Improve handling of expanding HTTP header values to prevent DoS Important TuxCare License Agreement CVE-2024-25617 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier {CVE-2023-52449} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - RDMA/core: Update CMA destination address on rdma_resolve_addr {CVE-2023-2176} - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux {CVE-2023-6546} - tty: n_gsm: fix restart handling via CLD command {CVE-2023-6546} - tty: n_gsm: fix deadlock in gsmtty_open() {CVE-2023-6546} - nvmet-tcp: Fix the H2C expected PDU len calculation {CVE-2023-6536} - nvmet-tcp: remove boilerplate code {CVE-2023-6536} - nvmet-tcp: add bounds check on Transfer Tag {CVE-2023-6536} - nvmet-tcp: fix a crash in nvmet_req_complete() {CVE-2023-6536} - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length {CVE-2023-6536} Important TuxCare License Agreement CVE-2023-39197 CVE-2023-52449 CVE-2023-52445 CVE-2023-6546 CVE-2023-52435 CVE-2023-6536 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel - Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551 Important TuxCare License Agreement CVE-2023-40547 CVE-2023-40551 CVE-2023-40549 CVE-2023-40550 CVE-2023-40546 CVE-2023-40548 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-25111: Fix infinite recursion when parsing HTTP chunks Important TuxCare License Agreement CVE-2024-25111 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-1013: Fix out-of-bounds stack write by adjusting byte size in callee function Important TuxCare License Agreement CVE-2024-1013 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-2398: Fix memory leak when aborting server push due to exceeding header limit Important TuxCare License Agreement CVE-2024-2398 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-52425: fix reparsings for large token to prevent DoS Important TuxCare License Agreement CVE-2023-52425 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Fix CVE-2024-32487: filename.c: quoting mishandling. Important TuxCare License Agreement CVE-2024-32487 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine {CVE-2021-47198} - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super {CVE-2024-0841} - bpf: Fix incorrect verifier pruning due to missing register precision taints {CVE-2023-2163} - bpf: Fix hashtab overflow check on 32-bit arches {CVE-2024-26884} - RDMA/mlx5: Fix fortify source warning while accessing Eth segment {CVE-2024-26907} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - mlxsw: spectrum_acl_tcam: Fix stack corruption {CVE-2024-26586} - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure {CVE-2024-26586} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} - uio: Fix use-after-free in uio_open {CVE-2023-52439} Important TuxCare License Agreement CVE-2021-46936 CVE-2024-26907 CVE-2024-26586 CVE-2021-47198 CVE-2023-2163 CVE-2023-52439 CVE-2024-0841 CVE-2024-26884 CVE-2021-47194 CVE-2024-23307 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-48624: filename.c: shell-quote filenames when invoking LESSCLOSE. Important TuxCare License Agreement CVE-2022-48624 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-4900: sapi/cli/php_cli_server.c: Prevent potential buffer overflow for large value of php_cli_server_workers_max - CVE-2023-3247: ext/soap/php_http.c: Fix missing randomness check and insufficient random bytes Moderate TuxCare License Agreement CVE-2023-3247 CVE-2022-4900 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-46218: fix cookie validation to prevent passing cookies to unrelated sites Moderate TuxCare License Agreement CVE-2023-46218 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-27316: fix HTTP/2 DoS vulnerability caused by memory exhaustion from endless continuation frames: Incoming headers that exceed limits are buffered in nghttp2 to generate an HTTP 413 response Important TuxCare License Agreement CVE-2024-27316 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-4408: use hashtable when parsing a message Important TuxCare License Agreement CVE-2023-4408 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-29469: dict.c: fix non-deterministic hashing of empty dict strings - CVE-2023-28484: fix NULL pointer dereferences in xmlSchemaFixupComplexType and xmlSchemaCheckCOSSTDerivedOK Moderate TuxCare License Agreement CVE-2023-29469 CVE-2023-28484 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Remove -b option, use original maintainer approach - CVE-2023-27043: reject malformed addresses in email.parseaddr() Moderate TuxCare License Agreement CVE-2023-27043 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Remove -b option, use original maintainer approach - Fix expat regression tests for xml_etree - CVE-2022-48564: Improve validation of Plist files that prevent DoS - CVE-2023-40217: Fix TLS handshake bypass - CVE-2023-27043: reject malformed addresses in email.parseaddr() Moderate TuxCare License Agreement CVE-2022-48564 CVE-2023-40217 CVE-2023-27043 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-2961: Fix buffer overflow issue in iconv() function when converting strings to ISO-2022-CN-EXT character set Important TuxCare License Agreement CVE-2024-2961 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-48795: implement "strict key exchange" mitigations, tests/pkd/pkd_daemon.c: relax pthread_kill assert in `pkd_stop` Moderate TuxCare License Agreement CVE-2023-48795 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-26461: fix possible memory leak in /krb5/src/lib/gssapi/krb5/k5sealv3.c - CVE-2024-26458: fix possible memory leak in /krb5/src/lib/rpc/pmap_rmt.c Moderate TuxCare License Agreement CVE-2024-26461 CVE-2024-26458 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-5678: Fix that DH_check_pub_key() and DH_generate_key() don't check large modulus - CVE-2023-3446: Fix that checking excessively long DH keys or parameters may be very slow. Moderate TuxCare License Agreement CVE-2023-3446 CVE-2023-5678 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-3094: Fix issue causing resources exhaustion in named when processing dynamic DNS updates from trusted clients by releasing memory allocated to unpermitted clients immediately upon rejection Important TuxCare License Agreement CVE-2022-3094 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-33600: nscd: avoid null pointer crashes after notfound response - CVE-2024-33601: fix memory allocation issue in netgroup cache by replacing xmalloc and xrealloc functions to prevent denial of service - CVE-2024-33602: fix memory corruption in netgroup cache by ensuring all strings are stored in the buffer in NSS callback Moderate TuxCare License Agreement CVE-2024-33600 CVE-2024-33602 CVE-2024-33601 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u412-b08. That fixes following CVEs: - CVE-2024-21011: Long Exception message leading to crash - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: C2 compilation fails with "Exceeded _node_regs array" Moderate TuxCare License Agreement CVE-2024-21011 CVE-2024-21085 CVE-2024-21094 CVE-2022-40433 CVE-2024-21068 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-48795: implement "strict key exchange" in ssh and sshd Moderate TuxCare License Agreement CVE-2023-48795 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-22365: use O_DIRECTORY to prevent local DoS situations Moderate TuxCare License Agreement CVE-2024-22365 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-4016: possible overflow in multiplication when allocating memory in ps/parser.c Low TuxCare License Agreement CVE-2023-4016 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-7008: prevent systemd-resolved from accepting DNS records of DNSSEC- signed domains without a signature to mitigate man-in-the-middle attacks Moderate TuxCare License Agreement CVE-2023-7008 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-43361: fix out-of-buffer operations Important TuxCare License Agreement CVE-2023-43361 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update iwlwifi firmware to mitigate CVE-2022-38076 for wifi adapters: Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260 Important TuxCare License Agreement CVE-2022-38076 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-32360: require authentication for CUPS-Get-Document. - CVE-2023-32324: fix _cups_strlcpy() to exit immediately if a length of the source string is zero Moderate TuxCare License Agreement CVE-2023-32360 CVE-2023-32324 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update to MySQL 8.0.36 - CVEs fixed: CVE-2023-21950 CVE-2023-22005 CVE-2023-22007 CVE-2023-22008 CVE-2023-22015 CVE-2023-22026 CVE-2023-22028 CVE-2023-22032 CVE-2023-22033 CVE-2023-22038 CVE-2023-22046 CVE-2023-22048 CVE-2023-22053 CVE-2023-22054 CVE-2023-22056 CVE-2023-22057 CVE-2023-22058 CVE-2023-22059 CVE-2023-22064 CVE-2023-22065 CVE-2023-22066 CVE-2023-22068 CVE-2023-22070 CVE-2023-22078 CVE-2023-22079 CVE-2023-22084 CVE-2023-22092 CVE-2023-22097 CVE-2023-22103 CVE-2023-22104 CVE-2023-22110 CVE-2023-22111 CVE-2023-22112 CVE-2023-22113 CVE-2023-22114 CVE-2023-22115 CVE-2024-20961 CVE-2024-20963 CVE-2024-20965 CVE-2024-20967 CVE-2024-20969 CVE-2024-20971 CVE-2024-20972 CVE-2024-20973 CVE-2024-20974 CVE-2024-20976 CVE-2024-20977 CVE-2024-20978 CVE-2024-20981 CVE-2024-20983 CVE-2024-20985 Moderate TuxCare License Agreement CVE-2023-22064 CVE-2023-22026 CVE-2024-20983 CVE-2024-20967 CVE-2024-20977 CVE-2023-22059 CVE-2023-22111 CVE-2023-22079 CVE-2023-22104 CVE-2024-20973 CVE-2023-22092 CVE-2024-20963 CVE-2024-20971 CVE-2023-22110 CVE-2024-20985 CVE-2024-20961 CVE-2024-20978 CVE-2024-20965 CVE-2023-22113 CVE-2023-22112 CVE-2024-20981 CVE-2024-20976 CVE-2024-20974 CVE-2023-22015 CVE-2023-22028 CVE-2023-22046 CVE-2023-22078 CVE-2023-22068 CVE-2023-22103 CVE-2023-22066 CVE-2023-22005 CVE-2023-22084 CVE-2023-22054 CVE-2023-22008 CVE-2023-22007 CVE-2023-22038 CVE-2023-21950 CVE-2023-22053 CVE-2023-22065 CVE-2023-22097 CVE-2024-20969 CVE-2023-22114 CVE-2023-22115 CVE-2023-22032 CVE-2024-20972 CVE-2023-22048 CVE-2023-22058 CVE-2023-22057 CVE-2023-22070 CVE-2023-22033 CVE-2023-22056 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update AMD CPU microcode to 2024-01-16: - Update AMD CPU microcode for processor family 19h: sig 0x00a00f11, sig 0x00a00f12; Moderate TuxCare License Agreement CVE-2023-20569 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Fix a memory leak in convert_hostent_to_gaih_addrtuple function with AI_ALL - CVE-2023-4806: fix memory access issue in getaddrinfo function by implementing _nss_*_gethostbyname3_r hook - CVE-2023-4813: fix memory leakage in gaih_inet function to prevent application crash when getaddrinfo function is called with specified hosts database configurations in /etc/nsswitch.conf Moderate TuxCare License Agreement CVE-2023-4806 CVE-2023-4813 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-28486: escape control characters in log messages - CVE-2023-28487: escape control characters in sudoreplay output Moderate TuxCare License Agreement CVE-2023-28487 CVE-2023-28486 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - net: Set true network header for ECN decapsulation {CVE-2024-26882} - media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884} - media: dvbdev: fix error logic at dvb_register_device() {CVE-2022-45884} - media: dvbdev: Fix memleak in dvb_register_device {CVE-2022-45884} - media: media/dvb: Use kmemdup rather than duplicating its implementation {CVE-2022-45884} - media: dvbdev: drop refcount on error path in dvb_device_open() {CVE-2022-45884} - media: dvbdev: fix refcnt bug {CVE-2022-45884} - media: dvbdev: adopts refcnt to avoid UAF {CVE-2022-45884} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type {CVE-2024-27020} - scsi: qla2xxx: Fix double free of fcport {CVE-2024-26929} - of: fdt: fix off-by-one error in unflatten_dt_nodes() {CVE-2022-48672} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - netfilter: nf_tables: disallow anonymous set with timeout flag {CVE-2024-26642} - media: technisat-usb2: break out of loop at end of buffer {CVE-2019-15505} - Input: gtco - bounds check collection indent level {CVE-2019-13631} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors {CVE-2020-0404} - netfilter: nft_set_pipapo: skip inactive elements during set walk {CVE-2023-6817} - libceph: harden msgr2.1 frame segment length checks {CVE-2023-44466} - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() {CVE-2023-31084} - dm ioctl: fix nested locking in table_clear() to remove deadlock concern {CVE-2023-2269} - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition {CVE-2023-1855} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - HID: betop: check shape of output reports {CVE-2023-1073} - HID: betop: fix slab-out-of-bounds Write in betop_probe {CVE-2023-1073} - HID: check empty report_list in hid_validate_values() {CVE-2023-1073} - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() {CVE-2022-45887} Critical TuxCare License Agreement CVE-2024-26882 CVE-2024-26642 CVE-2024-27020 CVE-2022-0850 CVE-2022-48672 CVE-2023-44466 CVE-2024-26929 CVE-2021-3923 CVE-2020-0404 CVE-2022-45884 CVE-2023-52752 CVE-2024-26934 CVE-2023-1073 CVE-2023-1855 CVE-2023-31084 CVE-2019-15505 CVE-2023-6817 CVE-2023-2269 CVE-2022-45887 CVE-2019-13631 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-6597: Prevent tempfile.TemporaryDirectory class dereference symlinks - CVE-2024-0450: Make zipfile module reject zip archives which overlap entries in the archive. Prevent “quoted-overlap” zip-bombs exploit. Important TuxCare License Agreement CVE-2024-0450 CVE-2023-6597 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-0450: Make zipfile module reject zip archives which overlap entries in the archive. Prevent “quoted-overlap” zip-bombs exploit. Moderate TuxCare License Agreement CVE-2024-0450 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-35937: fix a possible privilege escalation through a symlink check race condition Moderate TuxCare License Agreement CVE-2021-35937 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-5458: Fix early-out for ipv6 hostname validation, ensure full check is performed Moderate TuxCare License Agreement CVE-2024-5458 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - ima: define ima_max_digest_data struct without a flexible array variable - ima: detect changes to the backing overlay file - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852} - net/mlx5: Fix a race on command flush flow {CVE-2022-48858} - sctp: fix kernel-infoleak for SCTP sockets {CVE-2022-48855} - bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. {CVE-2022-0500} - bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. {CVE-2022-0500} - bpf: Introduce MEM_RDONLY flag {CVE-2022-0500} - bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL {CVE-2022-0500} - bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL {CVE-2022-0500} - bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL {CVE-2022-0500} - bpf: Introduce composable reg, ret and arg types. {CVE-2022-0500} - bpf: Extract nullable reg type conversion into a helper function {CVE-2022-0500} - bpf: Rename bpf_reg_state variables {CVE-2022-0500} - libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534} - net: fix __dst_negative_advice() race {CVE-2024-36971} - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' {CVE-2021-33631} - tipc: fix UAF in error path {CVE-2024-36886} - smb: client: fix parsing of SMB3.1.1 POSIX create context {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434} - perf: Disallow mis-matched inherited group reads {CVE-2023-5717} - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). {CVE-2023-4622} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - i2c: Fix a potential use after free {CVE-2019-25162} Important TuxCare License Agreement CVE-2021-33631 CVE-2023-1077 CVE-2022-3534 CVE-2023-52434 CVE-2024-26852 CVE-2019-25162 CVE-2024-36886 CVE-2024-36971 CVE-2024-36904 CVE-2022-48858 CVE-2022-0500 CVE-2023-4622 CVE-2024-26923 CVE-2022-48855 CVE-2024-39494 CVE-2023-5717 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-4091: fix file truncation issue in acl_xattr module by enforcing kernel file system permissions checks, use open_access_mask for access check in open_file() in smbd - CVE-2023-34967: fix type confusion vulnerability in mdssvc RPC service by implementing proper type checking in dalloc_value_for_key function - CVE-2023-34968: fix path disclosure vulnerability by sanitizing search query results - CVE-2023-42669: disable the rpcecho server Moderate TuxCare License Agreement CVE-2023-34968 CVE-2023-4091 CVE-2023-34967 CVE-2023-42669 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-33599: fix buffer overflow in netgroup cache Important TuxCare License Agreement CVE-2024-33599 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-38428: properly re-implement userinfo parsing (rfc2396) - Fix wget Test-proxied-https-auth.px and Test-proxied-https-auth.px tests failing - Providing wget -O and -q parameters while running in background generates a wget-log file Critical TuxCare License Agreement CVE-2024-38428 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE) Important TuxCare License Agreement CVE-2024-21145 CVE-2024-21144 CVE-2024-21131 CVE-2024-21138 CVE-2024-21140 CVE-2024-21147 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2023-38709: http_filters: HTTP response splitting - CVE-2024-38473: mod_proxy: server proxy encoding problem - CVE-2024-39573: mod_rewrite: proxy handler substitution - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix Critical TuxCare License Agreement CVE-2024-38474 CVE-2024-38476 CVE-2024-38477 CVE-2024-38475 CVE-2024-40725 CVE-2024-39884 CVE-2023-38709 CVE-2024-38473 CVE-2024-39573 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver Moderate TuxCare License Agreement CVE-2023-4693 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-32004: fetch/clone: detect dubious ownership of local repositories - CVE-2024-32465: upload-pack: disable lazy-fetching by default Important TuxCare License Agreement CVE-2024-32465 CVE-2024-32004 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-1975: Remove support for SIG(0) message verification Important TuxCare License Agreement CVE-2024-1975 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956} - userfaultfd: fix a race between writeprotect and exit_mmap() {CVE-2021-47461} - netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397} - x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742} - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161} - selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161} - pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940} - net: fix information leakage in /proc/net/ptype {CVE-2022-48757} - wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225} - ata: libata-core: Fix double free on error {CVE-2024-41087} - drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471} - drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - net/sched: flower: Fix chain template offload {CVE-2024-26669} - ipv6: Remove extra counter pull before gc {CVE-2023-52340} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340} - net: add a route cache full diagnostic message {CVE-2023-52340} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779} - tcp_metrics: validate source addr length {CVE-2024-42154} - net: fix out-of-bounds access in ops_init {CVE-2024-36883} - tap: add missing verification for short frame {CVE-2024-41090} - tun: add missing verification for short frame {CVE-2024-41091} - iommu: Fix potential use-after-free during probe {CVE-2022-48796} - nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790} - nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789} - nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772} - ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704} - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698} - ubi: Check for too small LEB size in VTBL code {CVE-2024-25739} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811} - arp: Prevent overflow in arp_req_get(). {CVE-2024-26733} - SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623} - ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622} - pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619} - wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} - drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486} - net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743} - tracing: Restructure trace_clock_global() to never block {CVE-2021-46939} - tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570} - gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570} - gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570} - gfs2: Remove ill-placed consistency check {CVE-2024-38570} - gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570} - gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - sched/psi: Fix use-after-free in ep_remove_wait_queue() {CVE-2023-52707} - wait: add wake_up_pollfree() {CVE-2023-52707} Critical TuxCare License Agreement CVE-2021-46939 CVE-2024-25742 CVE-2024-40956 CVE-2024-39471 CVE-2024-38552 CVE-2024-41091 CVE-2024-41090 CVE-2024-36883 CVE-2024-42161 CVE-2022-48790 CVE-2022-48788 CVE-2024-42154 CVE-2022-48789 CVE-2023-52530 CVE-2023-52486 CVE-2023-52619 CVE-2023-52622 CVE-2024-42228 CVE-2024-42225 CVE-2024-36978 CVE-2024-26925 CVE-2024-26773 CVE-2024-26704 CVE-2024-26698 CVE-2024-25739 CVE-2022-48743 CVE-2023-52707 CVE-2024-38570 CVE-2023-52623 CVE-2024-26733 CVE-2024-26772 CVE-2024-26614 CVE-2024-41087 CVE-2022-48796 CVE-2023-52811 CVE-2024-26668 CVE-2024-26669 CVE-2024-36940 CVE-2024-36960 CVE-2022-48757 CVE-2021-47461 CVE-2024-27397 CVE-2023-51779 CVE-2023-52340 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-6923: encode newlines in headers, verify headers are well-formed Moderate TuxCare License Agreement CVE-2024-6923 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - The release version was raised because it corresponds to version 13 - CVE-2024-45490: reject negative len for XML_ParseBuffer to prevent improper restriction of XML External Entity Reference - CVE-2024-45491: prevent integer overflow in dtdCopy - CVE-2024-45492: prevent integer overflow in nextScaffoldPart Critical TuxCare License Agreement CVE-2024-45492 CVE-2024-45490 CVE-2024-45491 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-37370: prevent modification of Extra Count field in GSS krb5 wrap token to avoid appearing truncated to application - CVE-2024-37371: fix invalid memory reads during GSS message token handling Critical TuxCare License Agreement CVE-2024-37371 CVE-2024-37370 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-1737-1: introduced new configurable limits that prevent the loading (into zones or into cache) of DNS resource records (RRs) that exceed them - CVE-2024-1737-2: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES. Add masterformat tests for testing RRsets. Fix limits tests - CVE-2023-2828-fixup: do not use header_prev in expire_lru_headers Important TuxCare License Agreement CVE-2024-1737 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285} - tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - nvme: avoid double free special payload {CVE-2024-41073} - wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - xfs: don't walk off the end of a directory data block {CVE-2024-41013} - tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665} - KVM: x86/mmu: make apf token non-zero to fix bug {CVE-2022-48943} - cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919} - netfilter: fix use-after-free in __nf_register_net_hook() {CVE-2022-48912} - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() {CVE-2022-48742} - selinux: fix double free of cond_list on error paths {CVE-2022-48740} - ALSA: hda: Fix UAF of leds class devs at unbinding {CVE-2022-48735} - drm/nouveau: fix off by one in BIOS boundary checking {CVE-2022-48732} - mm, slub: fix potential memoryleak in kmem_cache_open() {CVE-2021-47466} - x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() {CVE-2024-25744} - x86/entry: Rename ignore_sysret() {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs {CVE-2024-25744} - x86: Introduce ia32_enabled() {CVE-2024-25744} - scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124} - ftruncate: pass a signed offset {CVE-2024-42084} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035} - xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014} - drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988} - ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601} - Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840} - wifi: ath11k: fix htt pktlog locking {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking {CVE-2023-52798} - ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683} - ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478} - USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760} - phylib: fix potential use-after-free {CVE-2022-48754} - serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - mlxsw: thermal: Fix out-of-bounds memory accesses {CVE-2021-47441} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs {CVE-2021-47393} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47384} - virtio-net: Add validation for used length {CVE-2021-47352} - watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321} - ACPI: fix NULL pointer dereference {CVE-2021-47289} - ipv6: prevent possible NULL dereference in rt6_probe() {CVE-2024-40960} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() {CVE-2024-40959} - wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941} - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages {CVE-2024-40904} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet {CVE-2024-39506} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - crypto: bcm - Fix pointer arithmetic {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated {CVE-2024-38559} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 {CVE-2024-38558} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload {CVE-2024-36919} - netfilter: complete validation of user input {CVE-2024-35962} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() {CVE-2024-35944} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() {CVE-2024-26894} - dm: call the resume method on internal suspend {CVE-2024-26880} - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again {CVE-2024-26720} - tracing: Ensure visibility when inserting an element into tracing_map {CVE-2024-26645} - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() {CVE-2023-52809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() {CVE-2023-52470} - Input: add bounds checking to input_set_capability() {CVE-2022-48619} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - net: do not leave a dangling sk pointer, when socket creation fails {CVE-2024-40954} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - PCI/MSI: Fix UAF in msi_capability_init {CVE-2024-41096} Important TuxCare License Agreement CVE-2024-26645 CVE-2024-38559 CVE-2024-38579 CVE-2021-47393 CVE-2021-47441 CVE-2021-47497 CVE-2022-48619 CVE-2023-52478 CVE-2023-52605 CVE-2023-52683 CVE-2024-26855 CVE-2024-38601 CVE-2024-40941 CVE-2021-47383 CVE-2024-44987 CVE-2022-48912 CVE-2024-41073 CVE-2024-40929 CVE-2024-40912 CVE-2024-35962 CVE-2024-36919 CVE-2024-35944 CVE-2023-52809 CVE-2023-52800 CVE-2023-52798 CVE-2021-47352 CVE-2021-47289 CVE-2024-40988 CVE-2024-42148 CVE-2024-40960 CVE-2024-26880 CVE-2024-40959 CVE-2024-26665 CVE-2024-42301 CVE-2023-52884 CVE-2024-41014 CVE-2024-41013 CVE-2023-52840 CVE-2022-48760 CVE-2022-48754 CVE-2021-47527 CVE-2021-47466 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47321 CVE-2024-39499 CVE-2024-42124 CVE-2024-41035 CVE-2024-40901 CVE-2024-42084 CVE-2024-26894 CVE-2024-46800 CVE-2024-46722 CVE-2022-48943 CVE-2022-48735 CVE-2022-48742 CVE-2024-44940 CVE-2022-48732 CVE-2024-46673 CVE-2024-42285 CVE-2024-41071 CVE-2024-42280 CVE-2024-39506 CVE-2024-41096 CVE-2024-26720 CVE-2023-52470 CVE-2024-42284 CVE-2024-43900 CVE-2022-48919 CVE-2024-43882 CVE-2022-48740 CVE-2024-40954 CVE-2024-38558 CVE-2024-40904 CVE-2024-46723 CVE-2024-46738 CVE-2024-46725 CVE-2024-46724 CVE-2024-25744 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-28834: fix side-channel leak in the deterministic ECDSA Moderate TuxCare License Agreement CVE-2024-28834 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-7592: fix quadratic complexity in parsing cookies with backslashes Important TuxCare License Agreement CVE-2024-6232 CVE-2024-7592 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-4032: update ipaddress module to reflect latest IANA Special-Purpose Address Registries Low TuxCare License Agreement CVE-2024-4032 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-6232: remove backtracking when parsing tarfile headers - CVE-2024-7592: fix quadratic complexity in parsing '-quoted' cookie values with backslashes Important TuxCare License Agreement CVE-2024-7592 CVE-2024-6232 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-9026: Fix log tampering in PHP-FPM - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration Important TuxCare License Agreement CVE-2024-9026 CVE-2024-8927 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 - Update AMD CPU microcode to 2024-08-11 - Fix license info Important TuxCare License Agreement CVE-2023-31315 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588} - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() {CVE-2024-38588} - ftrace: Store the order of pages allocated in ftrace_page {CVE-2024-38588} - ftrace: Check if pages were allocated before calling free_pages() {CVE-2024-38588} - net/sched: Fix UAF when resolving a clash {CVE-2024-41040} - net/sched: act_ct: fix err check for nf_conntrack_confirm {CVE-2024-41040} - netns: Make get_net_ns() handle zero refcount net {CVE-2024-40958} - net/packet: fix packet_sock xmit return value checking {CVE-2022-20368} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - af_packet: fix data-race in packet_setsockopt / packet_setsockopt {CVE-2022-20368} - drm/amd/pm: Fix negative array index read {CVE-2024-46821} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - Squashfs: sanity check symbolic link size {CVE-2024-46744} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} Important TuxCare License Agreement CVE-2024-41040 CVE-2024-40958 CVE-2024-46818 CVE-2024-46821 CVE-2024-46744 CVE-2024-46756 CVE-2024-46758 CVE-2024-46757 CVE-2024-38588 CVE-2022-20368 CVE-2024-46813 CVE-2024-46731 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data boundaries larger than the read buffer Moderate TuxCare License Agreement CVE-2024-8925 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-5824: Remove serialized HTTP headers from storeClientCopy() Important TuxCare License Agreement CVE-2023-5824 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-5535: Validate provided client list in ssl/ssl_lib.c. Clarify SSL_select_next_proto documentation Moderate TuxCare License Agreement CVE-2024-5535 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to shenandoah-jdk8u432-b06 fixing the following CVEs: - CVE-2024-21208: unauthorized partial DoS vulnerability - CVE-2024-21210: unauthorized update, insert, or delete access to some of data - CVE-2024-21217: unauthorized partial DoS vulnerability - CVE-2024-21235: unauthorized update, insert, delete, or read access to some of data - Update the PR3533 patch Moderate TuxCare License Agreement CVE-2024-21235 CVE-2024-21217 CVE-2024-21210 CVE-2024-21208 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2019-12900: accept as many selectors as the file format allows but ignore any larger than the theoretical maximum, BZ_MAX_SELECTORS Critical TuxCare License Agreement CVE-2019-12900 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014} - memcg: fix possible use-after-free in memcg_write_event_control() {CVE-2022-48988} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698} - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029} - tipc: guard against string buffer overrun {CVE-2024-49995} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - padata: Fix possible divide-by-0 panic in padata_mt_helper() {CVE-2024-43889} - hwmon: (coretemp) Check for null before removing sysfs attrs {CVE-2022-49010} - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error {CVE-2024-47697} - wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930} - ipv6: avoid use-after-free in ip6_fragment() {CVE-2022-48956} - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685} - drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - firmware_loader: Block path traversal {CVE-2024-47742} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tcp: drop the hash_32() part from the index calculation {CVE-2022-1012} - tcp: increase source port perturb table to 2^16 {CVE-2022-1012} - tcp: dynamically allocate the perturb table used by source ports {CVE-2022-1012} - net: dccp: fix kernel crash on module load {CVE-2022-1012} - net: dccp: initialize (addr,port) listening hashtable {CVE-2022-1012} - tcp: add small random increments to the source port {CVE-2022-1012} - tcp: resalt the secret every 10 seconds {CVE-2022-1012} - tcp: use different parts of the port_offset for index and offset {CVE-2022-1012} - secure_seq: use the 64 bits of the siphash for port offset calculation {CVE-2022-1012} - Revert "[ELSCVE-6395] secure_seq: use the 64 bits of the siphash for port offset calculation" {CVE-2022-1012} - tcp: add some entropy in __inet_hash_connect() {CVE-2022-1012} - tcp: change source port randomizarion at connect() time {CVE-2022-1012} - esp: limit skb_page_frag_refill use to a single page {CVE-2022-27666} - drm/vmwgfx: Fix stale file descriptors on failed usercopy {CVE-2022-22942} - PM-runtime: add tracepoints for usage_count changes {CVE-2022-0330} - fget: clarify and improve __fget_files() implementation {CVE-2021-4083} - proc/fd: In proc_fd_link use fget_task {CVE-2021-4083} - kcmp: In kcmp_epoll_target use fget_task {CVE-2021-4083} - file: Rename __fcheck_files to files_lookup_fd_raw {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it {CVE-2021-4083} - Revert "[ELSCVE-2732] fget: check that the fd still exists after getting a ref to it" {CVE-2021-4083} - file: Replace fcheck_files with files_lookup_fd_rcu {CVE-2021-4083} - file: Factor files_lookup_fd_locked out of fcheck_files {CVE-2021-4083} Critical TuxCare License Agreement CVE-2024-49882 CVE-2022-22942 CVE-2024-43889 CVE-2024-41092 CVE-2024-49967 CVE-2024-49883 CVE-2024-49960 CVE-2024-47698 CVE-2022-48988 CVE-2024-50055 CVE-2024-47697 CVE-2022-49010 CVE-2024-49991 CVE-2022-1012 CVE-2021-4083 CVE-2024-47701 CVE-2022-27666 CVE-2022-0330 CVE-2024-49930 CVE-2022-48956 CVE-2024-50073 CVE-2024-49889 CVE-2022-49014 CVE-2024-47685 CVE-2024-50035 CVE-2024-47742 CVE-2024-49995 CVE-2024-47745 CVE-2022-49029 CVE-2024-49860 CVE-2024-50033 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-50602: Fix crash in XML_ResumeParser function by preventing XML_StopParser from stopping/suspending unstarted parser Moderate TuxCare License Agreement CVE-2024-50602 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2018-12699: Fix heap-based buffer overflow, oom, and stack overflow issues. Critical TuxCare License Agreement CVE-2018-12699 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-45802: Fix DoS by a trusted server by disabling ESI Important TuxCare License Agreement CVE-2024-45802 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-23638: Do not update StoreEntry expiration after errorAppendEntry() Moderate TuxCare License Agreement CVE-2024-23638 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-11233: Fix buffer overflow vulnerability in convert.quoted-printable-decode filter Important TuxCare License Agreement CVE-2024-11233 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-11234: fix HTTP fulluri CRLF injection Important TuxCare License Agreement CVE-2024-11234 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-9287: fix path names quoting to prevent command injection in virtual environment activation scripts Moderate TuxCare License Agreement CVE-2024-9287 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-2756: Fix issue introduced by incomplete fix of CVE-2022-31629 to prevent network and same-site attackers from setting insecure cookies in victim's browser - CVE-2024-3096: Fix issue where password_verify() incorrectly returns true when testing a blank string with password starting with a null byte Moderate TuxCare License Agreement CVE-2024-3096 CVE-2024-2756 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006} - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() {CVE-2022-48951} - ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884} - ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed {CVE-2024-49884} - media: edia: dvbdev: fix a use-after-free {CVE-2024-27043} - media: dvbdev: remove double-unlock {CVE-2024-27043} - mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858} - Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475} - x86/alternatives: Disable KASAN in apply_alternatives() {CVE-2023-52504} - ieee802154: ca8210: Fix a potential UAF in ca8210_probe {CVE-2023-52510} - wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531} - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans {CVE-2024-50264} - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057} - bpf: Fix out-of-bounds write in trie_get_next_key() {CVE-2024-50262} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969} - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895} Important TuxCare License Agreement CVE-2023-52504 CVE-2023-52531 CVE-2024-50115 CVE-2024-27043 CVE-2024-49895 CVE-2024-50264 CVE-2024-53057 CVE-2023-52510 CVE-2022-48951 CVE-2024-50262 CVE-2022-49006 CVE-2024-49950 CVE-2024-49969 CVE-2024-49884 CVE-2023-52475 CVE-2024-46858 CVE-2024-49894 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-12088: fix path traversal vulnerability by properly verifying symbolic link destinations - CVE-2024-12085: fix issue with checksum length manipulation leading to uninitialized memory leak Important TuxCare License Agreement CVE-2024-12085 CVE-2024-12088 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-12747: fix race condition during symbolic links handling - CVE-2024-12086: fix infoleak when connect to malicious server Moderate TuxCare License Agreement CVE-2024-12747 CVE-2024-12086 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-3622: fix possible stack overflow by adding the depth of recursion in the _get_children Moderate TuxCare License Agreement CVE-2021-3622 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - ELF: fix kernel.randomize_va_space double read {CVE-2024-46826} - smb: client: fix UAF in async decryption {CVE-2024-50047} - net: do not delay dst_entries_add() in dst_release() {CVE-2024-50036} - net: atlantic: eliminate double free in error handling logic {CVE-2023-52664} - smb: client: fix potential UAF in smb2_is_valid_oplock_break() {CVE-2024-35863} - smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864} - smb: client: fix potential UAF in cifs_stats_proc_show() {CVE-2024-35867} - smb: client: fix potential UAF in cifs_stats_proc_write() {CVE-2024-35868} - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() {CVE-2024-35861} - smb: client: fix potential UAF in cifs_debug_files_proc_show() {CVE-2024-26928} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" Important TuxCare License Agreement CVE-2024-50047 CVE-2024-35868 CVE-2024-35867 CVE-2024-35863 CVE-2024-35861 CVE-2024-26928 CVE-2024-50036 CVE-2024-35864 CVE-2023-52664 CVE-2024-46826 CVE-2023-52752 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd - Modify spec and run-tests.php to fix extension loading during testing Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-12087: fix path traversal vulnerability that allows write files outside of the client's intended destination directory by malicious server Moderate TuxCare License Agreement CVE-2024-12087 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format {CVE-2024-53104} - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156} - xsk: fix OOB map writes when deleting elements {CVE-2024-56614} - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103} - net: inet: do not leave a dangling sk pointer in inet_create() {CVE-2024-56601} - scsi: sg: Fix slab-use-after-free read in sg_release() {CVE-2024-56631} - scsi: sg: Enable runtime power management {CVE-2024-56631} - scsi: sg: Avoid race in error handling & drop bogus warn {CVE-2024-56631} - scsi: sg: Avoid sg device teardown race {CVE-2024-56631} - initramfs: avoid filename buffer overrun {CVE-2024-53142} - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604} - cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741} - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605} - af_packet: avoid erroring out after sock_init_data() in packet_create() {CVE-2024-56606} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() {CVE-2024-56602} - net: inet6: do not leave a dangling sk pointer in inet6_create() {CVE-2024-56600} - NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173} - net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603} - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 {CVE-2023-52818} - rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). {CVE-2024-26865} - tcp: Save unnecessary inet_twsk_purge() calls. {CVE-2024-26865} - ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689} - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' {CVE-2024-56608} - bpf: Check validity of link->type in bpf_link_show_fdinfo() {CVE-2024-53099} - drm/amd/pm: fix a double-free in si_dpm_init {CVE-2023-52691} - netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141} - tipc: fix NULL deref in cleanup_bearer() {CVE-2024-56661} - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). {CVE-2024-56642} Important TuxCare License Agreement CVE-2024-56661 CVE-2023-52741 CVE-2024-53142 CVE-2024-56614 CVE-2024-53104 CVE-2024-53103 CVE-2023-52691 CVE-2024-26689 CVE-2024-56606 CVE-2023-52818 CVE-2024-53173 CVE-2024-53099 CVE-2024-56602 CVE-2024-56605 CVE-2024-53156 CVE-2024-56601 CVE-2024-56604 CVE-2024-56631 CVE-2024-56600 CVE-2024-56608 CVE-2024-56603 CVE-2024-26865 CVE-2024-53141 CVE-2024-56642 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update AMD SEV CPU firmware to address CVE-2023-31356, CVE-2023-20584 Moderate TuxCare License Agreement CVE-2023-31356 CVE-2023-20584 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-3596: Generate and verify message MACs in libkrad for vulnerability in RADIUS protocol which allows attackers to forge authentication responses Critical TuxCare License Agreement CVE-2024-3596 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2007-4559: implement PEP 706 - a filter in the tarfile module to prevent directory traversal vulnerability Low TuxCare License Agreement CVE-2007-4559 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-11187: limit additional section record while queries processing to prevent CPU exhaustion Important TuxCare License Agreement CVE-2024-11187 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559 - Rebase mysql-mtr.patch - Remove mysql-fix-includes-robin-hood.patch - Rebase mysql-increase-wait-until-connect-timeout.patch Critical TuxCare License Agreement CVE-2025-21559 CVE-2025-21534 CVE-2025-21525 CVE-2025-21523 CVE-2025-21497 CVE-2025-21491 CVE-2025-21490 CVE-2024-7264 CVE-2024-21218 CVE-2024-21203 CVE-2024-21213 CVE-2025-21501 CVE-2024-5535 CVE-2025-21494 CVE-2025-21519 CVE-2025-21536 CVE-2025-21555 CVE-2024-21199 CVE-2024-21194 CVE-2024-21230 CVE-2024-21237 CVE-2024-21241 CVE-2024-21193 CVE-2025-21546 CVE-2025-21531 CVE-2025-21529 CVE-2025-21522 CVE-2025-21520 CVE-2025-21518 CVE-2025-21505 CVE-2025-21504 CVE-2025-21503 CVE-2024-11053 CVE-2024-21201 CVE-2024-21236 CVE-2024-21196 CVE-2024-21239 CVE-2024-21212 CVE-2024-21198 CVE-2024-21197 CVE-2025-21540 CVE-2025-21543 CVE-2025-21500 CVE-2024-37371 CVE-2024-21238 CVE-2024-21219 CVE-2025-21521 CVE-2024-21247 CVE-2024-21231 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-2494: check for negative array lengths before allocation in remote_daemon_dispatch Moderate TuxCare License Agreement CVE-2024-2494 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-27113: fix compilation of explicit child axis Important TuxCare License Agreement CVE-2025-27113 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-11168: fix improper validation of bracketed hosts in urllib.parse.urlsplit() and urlparse() functions - CVE-2025-0938: fix incomplete algorithm of validating hosts by disallowing square brackets in domain names Moderate TuxCare License Agreement CVE-2024-11168 CVE-2025-0938 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-47175: fix improper input validation in cups for PPD files Important TuxCare License Agreement CVE-2024-47175 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-0840: fix stack-buffer-overflow at objdump disassemble_bytes Important TuxCare License Agreement CVE-2025-0840 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c - CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c Important TuxCare License Agreement CVE-2025-24928 CVE-2024-56171 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-26465: fix vulnerability in OpenSSH when the VerifyHostKeyDNS option is enabled Moderate TuxCare License Agreement CVE-2025-26465 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - net: defer final 'struct net' free in netns dismantle {CVE-2024-56658} - smb: client: fix potential deadlock when releasing mids {CVE-2023-52757} - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). {CVE-2024-50154} - ALSA: 6fire: Release resources at card release {CVE-2024-53239} - smb: client: fix use-after-free of signing key {CVE-2024-53179} - tun: avoid double free in tun_free_netdev {CVE-2022-4744} - Revert "tun: call dev_get_valid_name() before register_netdevice()" {CVE-2022-4744} - USB: serial: io_edgeport: fix use after free in debug printk {CVE-2024-50267} - igb: Fix use-after-free error during reset {CVE-2021-47301} - HID: core: zero-initialize the report buffer {CVE-2024-50302} - usb: musb: sunxi: Fix accessing an released usb phy {CVE-2024-50269} - dm cache: fix potential out-of-bounds access on the first resume {CVE-2024-50278} - dm cache: fix out-of-bounds access to the dirty bitset when resizing {CVE-2024-50278} - wifi: iwlegacy: Clear stale interrupts before resuming device {CVE-2024-50234} - security/keys: fix slab-out-of-bounds in key_task_permission {CVE-2024-50301} - udf: fix uninit-value use in udf_get_fileshortad {CVE-2024-50143} - overflow: Allow mixed type arguments {CVE-2024-50143} - compiler.h: drop fallback overflow checkers {CVE-2024-50143} - overflow: Add __must_check attribute to check_*() helpers {CVE-2024-50143} - media: s5p-jpeg: prevent buffer overflows {CVE-2024-53061} - mptcp: fix double-free on socket dismantle {CVE-2024-26782} - drm/amdgpu: fix usage slab after free {CVE-2024-56551} - bpf: fix OOB devmap writes when deleting elements {CVE-2024-56615} - uprobe: avoid out-of-bounds memory access of fetching args {CVE-2024-50067} Important TuxCare License Agreement CVE-2024-56615 CVE-2024-56551 CVE-2024-50301 CVE-2024-50067 CVE-2024-56658 CVE-2024-50269 CVE-2021-47301 CVE-2024-50267 CVE-2024-50302 CVE-2024-50143 CVE-2024-53061 CVE-2024-53239 CVE-2022-4744 CVE-2024-53179 CVE-2023-52757 CVE-2024-50154 CVE-2024-26782 CVE-2024-50234 CVE-2024-50278 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-49043: fix use-after-free vulnerability in xmlXIncludeAddNode Moderate TuxCare License Agreement CVE-2022-49043 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-24528: prevent overflow when calculating ulog block size Moderate TuxCare License Agreement CVE-2025-24528 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-2408: introduce implicit rejection mechanism for RSA PKCS#1 v1.5 Moderate TuxCare License Agreement CVE-2024-2408 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write Important TuxCare License Agreement CVE-2025-0624 CVE-2025-0622 CVE-2024-56737 CVE-2024-45781 CVE-2024-45775 CVE-2024-1048 CVE-2024-45782 CVE-2025-0678 CVE-2025-1118 CVE-2025-1125 CVE-2024-45774 CVE-2024-45777 CVE-2024-45780 CVE-2024-45776 CVE-2025-0690 CVE-2024-45783 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-11235: fix Use-after-free for ??= due to incorrect live-range calculation Important TuxCare License Agreement CVE-2024-11235 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-1734: fail http headers without colon Low TuxCare License Agreement CVE-2025-1734 CVE-2025-1217 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-1861: move allocation of location from heap to stack, add error checking for location length Moderate TuxCare License Agreement CVE-2025-1861 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-1736: add checking of http user header crlf Low TuxCare License Agreement CVE-2025-1736 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-11023: Fix issue in DOM manipulation methods to prevent execution of untrusted code Moderate TuxCare License Agreement CVE-2020-11023 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-1219: fix libxml streams wrong content-type on redirect Moderate TuxCare License Agreement CVE-2025-1219 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to shenandoah-jdk8u452-b09 fixing the following CVEs: - CVE-2025-21587: better TLS connection support - CVE-2025-30691: improve compiler transformations - CVE-2025-30698: enhance Buffered Image handling Important TuxCare License Agreement CVE-2025-30698 CVE-2025-30691 CVE-2025-21587 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-8176: fix stack overflow vulnerability when parsing deeply nested entity references Important TuxCare License Agreement CVE-2024-8176 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2021-46848: fix ETYPE_OK off-by-one array size check in asn1_encode_simple_der Critical TuxCare License Agreement CVE-2021-46848 CVE-2024-12133 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-32415: fix heap-based buffer under-read in xmlSchemaIDCFillNodeTables function - CVE-2025-32414: fix out-of-bounds memory access in Python API by correcting return value in xmlPythonFileRead and xmlPythonFileReadRaw. Important TuxCare License Agreement CVE-2025-32415 CVE-2025-32414 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() {CVE-2024-57798} - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() {CVE-2022-49720} - drm: nv04: Fix out of bounds access {CVE-2024-27008} - parport: Proper fix for array out-of-bounds access {CVE-2024-50074} - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd {CVE-2025-21969} - media: uvcvideo: Fix double free in error path {CVE-2024-57980} - vrf: use RCU protection in l3mdev_l3_out() {CVE-2025-21791} - geneve: Fix use-after-free in geneve_find_dev(). {CVE-2025-21858} - dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763} - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() {CVE-2025-21993} - vlan: enforce underlying device type {CVE-2025-21920} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928} - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices {CVE-2024-53197} - can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922} - gso: do not skip outer ip header in case of ipip and net_failover {CVE-2022-48936} - cifs: fix potential double free during failed mount {CVE-2022-49541} - bpf: Fix out of bounds access for ringbuf helpers {CVE-2021-4204} - bpf: Generally fix helper register offset check {CVE-2021-4204} - bpf: Generalize check_ctx_reg for reuse with other types {CVE-2021-4204} - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() {CVE-2022-48701} - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() {CVE-2022-48702} Important TuxCare License Agreement CVE-2021-4204 CVE-2025-21791 CVE-2025-21969 CVE-2025-21858 CVE-2025-21928 CVE-2025-21993 CVE-2023-52922 CVE-2024-26763 CVE-2024-53197 CVE-2024-57980 CVE-2022-48936 CVE-2022-48702 CVE-2022-49541 CVE-2025-21920 CVE-2024-27008 CVE-2024-50074 CVE-2024-57798 CVE-2025-21702 CVE-2022-49720 CVE-2022-48701 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-12243: x509: optimize name constraints processing Moderate TuxCare License Agreement CVE-2024-12243 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update to MySQL 8.0.42 - CVEs fixed: CVE-2025-21574 CVE-2025-21577 CVE-2025-21579 CVE-2025-21581 CVE-2025-21584 CVE-2025-21585 CVE-2025-30681 CVE-2025-30682 CVE-2025-30683 CVE-2025-30684 CVE-2025-30688 CVE-2025-30689 CVE-2025-30695 CVE-2025-30696 CVE-2025-30699 CVE-2025-30703 CVE-2025-30705 CVE-2025-30715 CVE-2025-30715 CVE-2025-30721 CVE-2025-30722 Moderate TuxCare License Agreement CVE-2025-30688 CVE-2025-30721 CVE-2025-30710 CVE-2025-21581 CVE-2025-21585 CVE-2025-30683 CVE-2025-21579 CVE-2025-30681 CVE-2025-30695 CVE-2025-21584 CVE-2025-30703 CVE-2025-21577 CVE-2025-30684 CVE-2025-30722 CVE-2025-30705 CVE-2025-30682 CVE-2025-30715 CVE-2025-30699 CVE-2025-30689 CVE-2025-21574 CVE-2025-30696 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-32728: fix logic error in DisableForwarding option Low TuxCare License Agreement CVE-2025-32728 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - vsock: Keep the binding until socket destruction {CVE-2025-21756} - mt76: fix use-after-free by removing a non-RCU wcid pointer {CVE-2022-49328} - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() {CVE-2022-49840} - ASoC: core: Fix use-after-free in snd_soc_exit() {CVE-2022-49842} - net: sched: Fix use after free in red_enqueue() {CVE-2022-49921} - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() {CVE-2022-49846} - ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892} - dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122} - scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114} - mac80211: fix potential double free on mesh join {CVE-2022-49290} - wifi: mac80211: fix use-after-free in chanctx code {CVE-2022-49416} - ext4: fix OOB read when checking dotdot dir {CVE-2025-37785} - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988} - tracing: Fix potential double free in create_var_ref() {CVE-2022-49410} - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740} - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths {CVE-2022-48991} - cifs: potential buffer overflow in handling symlinks {CVE-2022-49058} - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init {CVE-2022-49478} - HID: elan: Fix potential double free in elan_input_configured {CVE-2022-49508} - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers {CVE-2023-52621} - drm/amd/pm: fix double free in si_parse_power_table() {CVE-2022-49530} - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() {CVE-2025-21780} - crypto: scomp - fix req->dst buffer overflow {CVE-2023-52612} - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} - net: make sock_inuse_add() available {CVE-2024-53168} Important TuxCare License Agreement CVE-2023-52988 CVE-2022-49410 CVE-2022-49478 CVE-2022-49508 CVE-2022-49530 CVE-2025-21780 CVE-2024-53168 CVE-2022-49846 CVE-2022-49892 CVE-2022-49058 CVE-2022-48991 CVE-2022-49416 CVE-2022-49290 CVE-2025-37785 CVE-2022-49840 CVE-2022-49921 CVE-2022-49842 CVE-2025-21756 CVE-2023-52612 CVE-2022-49740 CVE-2023-52621 CVE-2022-49122 CVE-2022-49114 CVE-2022-49328 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2017-8923: fix integer overflow in string concatenation - Fix heap buffer overflow via str_repeat Critical TuxCare License Agreement CVE-2017-8923 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2016-9840: fix improper pointer arithmetic in bundled zlib Important TuxCare License Agreement CVE-2016-9840 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-52005: add sideband.allowControlCharacters config which gives a possibility to avoid control characters in sideband - fix multiple memory leaks in config Important TuxCare License Agreement CVE-2024-52005 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-4802: fix issue of untrusted LD_LIBRARY_PATH environment variable vulnerability by restricting loading of dynamically shared libraries in statically compiled setuid binaries Important TuxCare License Agreement CVE-2025-4802 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-7264: fix out-of-bound read in GTime2str() function Moderate TuxCare License Agreement CVE-2024-7264 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-12762: fix out of bounds write vulnerability in printbuf Important TuxCare License Agreement CVE-2020-12762 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-13176: fix timing side-channel in ECDSA signature computation Moderate TuxCare License Agreement CVE-2024-13176 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-3576: possible spoofing of GSSAPI-protected messages using RC4-HMAC-MD5 Moderate TuxCare License Agreement CVE-2025-3576 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-32462: fix Local Privilege Escalation vulnerability via host option Important TuxCare License Agreement CVE-2025-32462 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-49794: fix use-after-free issue triggered by processing certain <sch:name path="..."/> elements in input XML file. - CVE-2025-49796: fix memory corruption issue triggered by processing certain sch:name elements in input XML file. - CVE-2025-6021: fix integer overflow in buffer size calculations to prevent stack-based buffer overflow Critical TuxCare License Agreement CVE-2025-49794 CVE-2025-49796 CVE-2025-6021 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-48384: config: quote values containing CR character Important TuxCare License Agreement CVE-2025-48384 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions - Perform regression testing Important TuxCare License Agreement CVE-2025-6020 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-52533: gsocks4aproxy: fix a single byte buffer overflow in connect - Fix test failure in gdatetime Important TuxCare License Agreement CVE-2024-52533 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data") Important TuxCare License Agreement CVE-2025-4517 CVE-2025-4435 CVE-2025-4330 CVE-2025-4138 CVE-2024-12718 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Bluetooth: Fix use after free in hci_send_acl {CVE-2022-49111} - NFSv4/pnfs: Fix a use-after-free bug in open {CVE-2022-50072} - NFSv4: Don't hold the layoutget locks across multiple RPC calls {CVE-2022-50072} - net: qrtr: start MHI channel after endpoit creation {CVE-2022-50044} - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() {CVE-2022-49940} - net: atlantic: fix aq_vec index out of range error {CVE-2022-50066} - ndisc: use RCU protection in ndisc_alloc_skb() {CVE-2025-21764} - udmabuf: fix a buf size overflow issue during udmabuf creation {CVE-2025-37803} - mptcp: fix race on unaccepted mptcp sockets {CVE-2022-49669} - net: introduce and use lock_sock_fast_nested() {CVE-2022-49669} - net: add annotation for sock_{lock,unlock}_fast {CVE-2022-49669} - net/mlx5: Always stop health timer during driver removal {CVE-2024-40906} - nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open {CVE-2024-46682} - nfsd: fix possible badness in FREE_STATEID {CVE-2024-50043} - nfsd: fix race between laundromat and free_stateid {CVE-2024-50106} - nfsd: split sc_status out of sc_type {CVE-2024-50106} - nfsd: avoid race after unhash_delegation_locked() {CVE-2024-50106} - nfsd: remove fault injection code {CVE-2024-50106} - nfsd: don't call functions with side-effecting inside WARN_ON() {CVE-2024-50106} - ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855 {CVE-2022-49238} - cifs: Fix UAF in cifs_demultiplex_thread() {CVE-2023-52572} - xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982} - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() {CVE-2024-50282} Important TuxCare License Agreement CVE-2024-50043 CVE-2024-46682 CVE-2022-50072 CVE-2022-50044 CVE-2022-49940 CVE-2022-50066 CVE-2025-21764 CVE-2025-37803 CVE-2024-50106 CVE-2022-49238 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to shenandoah-jdk8u462-b08 (GA) fixing the following CVEs: - CVE-2025-30749: better Glyph drawing - CVE-2025-30754: enhance TLS protocol support - CVE-2025-30761: improve scripting supports - CVE-2025-50106: glyph out-of-memory access and crash Important TuxCare License Agreement CVE-2025-30761 CVE-2025-30754 CVE-2025-30749 CVE-2025-50106 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-4373: fix integer overflow in g_string_insert_unichar() function to prevent buffer underwrite Moderate TuxCare License Agreement CVE-2025-4373 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdo_pgsql extensions Important TuxCare License Agreement CVE-2025-1220 CVE-2025-6491 CVE-2025-1735 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary script execution via specially crafted filenames in a repository - CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary file creation/truncation - CVE-2025-46835: fix a vulnerability in Git GUI where editing files in maliciously named directories could lead to arbitrary file overwrite Moderate TuxCare License Agreement CVE-2025-27614 CVE-2025-46835 CVE-2025-27613 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update Intel CPU microcode to 20250512 release, addresses CVE-2025-20012, CVE-2025-24495, CVE-2024-43420, CVE-2025-20623, CVE-2024-45332, CVE-2024-28956, CVE-2025-20103, CVE-2025-20054: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003f7; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000639; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Addition of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) at revision 0xa0000d1; - Addition of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) at revision 0x10003a2; - Addition of cpuid:B0650/0x80 (ARL-U A1) microcode (in microcode.dat) at revision 0xa; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4128; - Addition of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) at revision 0x11f; - Addition of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C0664/0x82 microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C06A2/0x82 microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002a9; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Update of cpuid:50657/0xbf (CLX-SP/W/X B1/L1) microcode (in microcode.dat) from revision 0x5003707 up to 0x5003901; - Update of cpuid:5065B/0xbf (CPX-SP A1) microcode (in microcode.dat) from revision 0x7002904 up to 0x7002b01; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003f5 up to 0xd000404; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002c0 up to 0x10002d0; - Update of cpuid:706A8/0x01 (GLK-R R0) microcode (in microcode.dat) from revision 0x24 up to 0x26; - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode (in microcode.dat) from revision 0xc6 up to 0xca; - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode (in microcode.dat) from revision 0xb8 up to 0xbc; - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode (in microcode.dat) from revision 0x38 up to 0x3c; - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode (in microcode.dat) from revision 0x52 up to 0x56; - Update of cpuid:806EC/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c0003f7; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000639; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c0003f7; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000639; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c0003f7; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000639; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000639; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x9 up to 0xa; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x436 up to 0x437; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x102 up to 0x104; - Update of cpuid:A0652/0x20 (CML-H R1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0653/0x22 (CML-S 6+2 G1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0655/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0660/0x80 (CML-U 6+2 A0) microcode (in microcode.dat) from revision 0xfe up to 0x102; - Update of cpuid:A0661/0x80 (CML-U 6+2 v2 K1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x63 up to 0x64; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x20 up to 0x24; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000330 up to 0x3000341; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12c up to 0x12f; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4124 up to 0x4128; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4124 up to 0x4128; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1c up to 0x1d; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000291 up to 0x210002a9; Moderate TuxCare License Agreement CVE-2025-20054 CVE-2025-20103 CVE-2024-28956 CVE-2025-20012 CVE-2024-45332 CVE-2024-43420 CVE-2025-24495 CVE-2025-20623 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-6965: fix memory corruption issue caused by exceeding the number of columns with aggregate terms Critical TuxCare License Agreement CVE-2025-6965 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - net: ch9200: fix uninitialised access during mii_nway_restart {CVE-2025-38086} - jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted {CVE-2022-50126} - kernfs: fix potential NULL dereference in __kernfs_remove {CVE-2022-50148} - md-raid10: fix KASAN warning {CVE-2022-50211} - xhci: Fix null pointer dereference in remove if xHC has only one roothub {CVE-2022-49962} - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905} - iavf: Fix reset error handling {CVE-2022-50053} - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788} - ext4: ignore xattrs past end {CVE-2025-37738} - ext4: fix off-by-one error in do_split {CVE-2025-23150} - net: atm: fix use after free in lec_send() {CVE-2025-22004} - media: uvcvideo: Remove dangling pointers {CVE-2024-58002} - RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event {CVE-2022-50136} - stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() {CVE-2022-50039} - drivers:md:fix a potential use-after-free bug {CVE-2022-50022} - udmabuf: Set the DMA mask for the udmabuf device (v2) {CVE-2022-49983} - netfilter: flowtable: fix stuck flows on cleanup due to pending work {CVE-2022-50000} - netfilter: flowtable: add function to invoke garbage collection immediately {CVE-2022-50000} - drm/amd/display: clear optc underflow before turn off odm clock {CVE-2022-49969} Important TuxCare License Agreement CVE-2022-50000 CVE-2022-49977 CVE-2022-50211 CVE-2022-49962 CVE-2022-49788 CVE-2025-22004 CVE-2025-38086 CVE-2022-50148 CVE-2025-37738 CVE-2025-23150 CVE-2022-50136 CVE-2022-50053 CVE-2025-21905 CVE-2022-50039 CVE-2022-50022 CVE-2022-49983 CVE-2022-49969 CVE-2022-50126 CVE-2024-58002 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by `atype` corruption Important TuxCare License Agreement CVE-2025-7425 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration Moderate TuxCare License Agreement CVE-2024-52006 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-8058: fix double-free after allocation failure in regcomp Moderate TuxCare License Agreement CVE-2025-8058 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-30630: do not let --dump-bin overwrite an existing file Important TuxCare License Agreement CVE-2023-30630 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-40909: prevent race conditions during cloning dirhandles Moderate TuxCare License Agreement CVE-2025-40909 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths Moderate TuxCare License Agreement CVE-2024-46901 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-32988: fix double-free vulnerability when exporting othernames in SAN Important TuxCare License Agreement CVE-2025-32988 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-50349: fix ANSI escape sequence vulnerability that occurs when asking for credentials interactively Low TuxCare License Agreement CVE-2024-50349 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103} - ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150} - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352} - can: peak_usb: fix use after free bugs {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159} - RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200} - udp: Fix memory accounting leak. {CVE-2025-22058} - ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50083} - ext4: correct the misjudgment in ext4_iget_extra_inode {CVE-2022-50083} - ext4: correct max_inline_xattr_value_size computing {CVE-2022-50083} - ext4: fix use-after-free in ext4_xattr_set_entry {CVE-2022-50083} - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h {CVE-2022-50083} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085} - padata: fix UAF in padata_reorder {CVE-2025-21727} - net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177} - sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177} - sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177} - sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177} - sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177} - sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000} - mptcp: do not queue data on closed subflows {CVE-2022-50070} - mptcp: export mptcp_subflow_active {CVE-2022-50070} - net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477} - tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464} - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211} - scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332} - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079} - ext4: avoid resizing to a partial cluster size {CVE-2022-50020} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890} - net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273} - ice: xsk: prohibit usage of non-balanced queue id {CVE-2022-50003} - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052} - virtio-gpu: fix a missing check to avoid NULL dereference {CVE-2022-50181} - usb: xhci_plat_remove: avoid NULL dereference {CVE-2022-50133} - ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot {CVE-2022-50015} - netfilter: nft_tproxy: restrict to prerouting hook {CVE-2022-50001} - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq {CVE-2022-49986} - ath11k: fix netdev open race {CVE-2022-50187} Important TuxCare License Agreement CVE-2025-38177 CVE-2025-38000 CVE-2025-38477 CVE-2022-50127 CVE-2025-38200 CVE-2022-50083 CVE-2021-47103 CVE-2025-38352 CVE-2021-47670 CVE-2022-50070 CVE-2025-38464 CVE-2025-38211 CVE-2025-38273 CVE-2025-38350 CVE-2025-38332 CVE-2025-38085 CVE-2025-37890 CVE-2022-50020 CVE-2025-38052 CVE-2022-50181 CVE-2022-50187 CVE-2024-53150 CVE-2025-38250 CVE-2025-21727 CVE-2025-22058 CVE-2025-38079 CVE-2025-38159 CVE-2022-50003 CVE-2022-50133 CVE-2022-50015 CVE-2022-50001 CVE-2022-49986 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-31486: fix insecure default TLS configuration Important TuxCare License Agreement CVE-2023-31486 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-31484: verify TLS certificates when downloading distributions over HTTPS - CVE-2020-16156: fix Signature Verification Bypass Important TuxCare License Agreement CVE-2020-16156 CVE-2023-31484 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-49630: fix denial of service attack triggered by untrusted clients causing an assertion in mod_proxy_http2 - CVE-2025-23048: fix access control bypass by trusted clients in mod_ssl configurations - CVE-2025-49812: remove support for TLS upgrade to mitigate HTTP desynchronisation attack - CVE-2024-47252: escape user-supplied data in mod_ssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files Important TuxCare License Agreement CVE-2024-47252 CVE-2025-49630 CVE-2025-23048 CVE-2025-49812 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-5318: fix out-of-bounds read in sftp_handle function to prevent potential memory disclosure Important TuxCare License Agreement CVE-2025-5318 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-8194: tarfile: validate archives to ensure non-negative member offsets Important TuxCare License Agreement CVE-2025-8194 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-4504: validate length of attacker-crafted PPD PostScript documents to prevent heap-based buffer overflow and possible code execution - CVE-2025-58060: fix authentication bypass issue caused by not checking password when AuthType is not Basic. Important TuxCare License Agreement CVE-2023-4504 CVE-2025-58060 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-32990: fix heap-buffer-overflow flaw in template parsing logic to prevent OOB NULL pointer write and memory corruption Important TuxCare License Agreement CVE-2025-32990 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-5372: uninitialized key buffers caused by inconsistent ssh_kdf() return value Important TuxCare License Agreement CVE-2025-5372 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-9230: fix incorrect check of unwrapped key size Moderate TuxCare License Agreement CVE-2025-9230 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-0395: fix buffer underallocation in assert() and libc_fatal() mmap handling Moderate TuxCare License Agreement CVE-2025-0395 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-34397: fix GDBus signal subscriptions from unicast spoofing Low TuxCare License Agreement CVE-2024-34397 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-6395: fix NULL pointer dereference flaw in _gnutls_figure_common_ciphersuite() Moderate TuxCare License Agreement CVE-2025-6395 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-39804: fix crash in GNU tar caused by incorrect handling of extended PAX xattr headers leading to memory corruption (DoS) Low TuxCare License Agreement CVE-2023-39804 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-32020: refuse local clones of unowned repositories to prevent TOCTOU race conditions Low TuxCare License Agreement CVE-2024-32020 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Rebuild with the latest ELS version of bind to address CVE-2022-3094 Important TuxCare License Agreement CVE-2022-3094 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure Important TuxCare License Agreement CVE-2025-62168 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087} - wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226} - vsock: Fix transport_* TOCTOU {CVE-2025-38461} - ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} - perf/aux: Fix AUX buffer serialization {CVE-2024-46713} - locking/ww_mutex/test: Fix potential workqueue corruption {CVE-2023-52836} - media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621} - ath10k: skip ath10k_halt during suspend for driver state RESTARTING {CVE-2022-49519} - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() {CVE-2022-48738} - partitions: mac: fix handling of bogus partition table {CVE-2025-21772} - ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - ppdev: Add an error check in register_device {CVE-2024-36015} - scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} - enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659} - dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929} - dlm: fix plock invalid read {CVE-2022-49407} - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev {CVE-2022-48759} - bpf: Don't use tnum_range on array range checking for poke descriptors {CVE-2022-49985} - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001} - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes {CVE-2023-53185} - dm integrity: fix memory corruption when tag_size is less than digest size {CVE-2022-49044} - drm/radeon: possible buffer overflow {CVE-2023-52867} - ata: sata_dwc_460ex: Fix crash due to OOB write {CVE-2022-49073} - fs/jfs: Add validity check for db_maxag and db_agpref {CVE-2023-52804} - net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581} - thermal: core: prevent potential string overflow {CVE-2023-52868} - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data {CVE-2022-49145} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} - drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119} - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408} - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229} - ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} - net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} - net: stmmac: fix dma queue left shift overflow issue {CVE-2022-49592} - iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904} - crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 {CVE-2022-50228} - soundwire: cadence: fix invalid PDI offset {CVE-2024-38635} - wifi: at76c50x: fix use after free access in at76_disconnect {CVE-2025-37796} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans {CVE-2023-53034} - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695} - smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730} - scsi: lpfc: Fix buffer free/clear order in deferred receive path {CVE-2025-39841} - Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386} - scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322} - ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-53705} - wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072} - wifi: rtlwifi: remove unused dualmac control leftovers {CVE-2024-58072} - wifi: rtlwifi: remove unused timer and related code {CVE-2024-58072} - net: mdio: validate parameter addr in mdiobus_get_phy() {CVE-2023-53019} - wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864} - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() {CVE-2025-22121} - ext4: move where set the MAY_INLINE_DATA flag is set {CVE-2025-22121} - ext4: introduce ITAIL helper {CVE-2025-22121} - ext4: improve xattr consistency checking and error reporting {CVE-2025-22121} - net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789} - mm: fix zswap writeback race condition {CVE-2023-53178} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367} - dma-buf/dma-resv: check if the new fence is really later {CVE-2022-49935} Important TuxCare License Agreement CVE-2022-49935 CVE-2022-49145 CVE-2022-48738 CVE-2022-48695 CVE-2023-52847 CVE-2022-49592 CVE-2022-49519 CVE-2024-53214 CVE-2024-57929 CVE-2023-53365 CVE-2022-49407 CVE-2025-37789 CVE-2025-22121 CVE-2023-53019 CVE-2025-37796 CVE-2023-53034 CVE-2024-58014 CVE-2025-21772 CVE-2024-58072 CVE-2023-53705 CVE-2023-53322 CVE-2023-53386 CVE-2025-39841 CVE-2025-39817 CVE-2023-53297 CVE-2024-57904 CVE-2022-50228 CVE-2024-56570 CVE-2025-39730 CVE-2025-38527 CVE-2024-42119 CVE-2024-38659 CVE-2025-38718 CVE-2023-53185 CVE-2022-50408 CVE-2022-50087 CVE-2022-49044 CVE-2023-52836 CVE-2022-48759 CVE-2022-49073 CVE-2023-52868 CVE-2023-52804 CVE-2024-46713 CVE-2025-21704 CVE-2024-52332 CVE-2023-52867 CVE-2025-38498 CVE-2024-38635 CVE-2024-36015 CVE-2024-38621 CVE-2022-49292 CVE-2023-53125 CVE-2022-49985 CVE-2025-39757 CVE-2022-50367 CVE-2023-53178 CVE-2025-39864 CVE-2025-38461 CVE-2023-53675 CVE-2023-53226 CVE-2025-38001 CVE-2023-53581 CVE-2023-53229 CVE-2023-53373 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-40778: fix issue with BIND being too lenient when accepting records from answers to prevent injection of forged data into the cache Important TuxCare License Agreement CVE-2025-40778 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-58364: fix unsafe deserialization and validation of printer attributes causing null dereference Moderate TuxCare License Agreement CVE-2025-58364 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to shenandoah-jdk8u472-b08 (GA) fixing the following CVEs: - CVE-2025-53057: enhance certificate handling - CVE-2025-53066: enhance Path Factories Moderate TuxCare License Agreement CVE-2025-53057 CVE-2025-53066 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-58098: don't pass querry string args as command line arguments to SSI-invoked CGI scripts Important TuxCare License Agreement CVE-2025-58098 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-11083: fix corrupt ELF section header handling Important TuxCare License Agreement CVE-2025-11083 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-61985: potential code execution using the ‘\0’ character in an ssh:// URI, when a ProxyCommand is used Moderate TuxCare License Agreement CVE-2025-61984 CVE-2025-61985 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-4516: use-after-free in unicode-escape decoder with custom error handlers Moderate TuxCare License Agreement CVE-2025-4516 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Rebase to version 2.5.0 - CVE-2024-28757: prevent billion laughs attacks in isolated external parser (part of #839), reject direct parameter entity recursion (part of #839) - CVE-2025-59375: fix memory amplification and add allocation tracker - CVE-2013-0340: properly handle entities expansion Moderate TuxCare License Agreement CVE-2025-59375 CVE-2013-0340 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-0938: disallow square brackets in domain names for parsed URLs to prevent differential URL parsing Moderate TuxCare License Agreement CVE-2025-0938 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-9086: cookie: don't treat the leading slash as trailing Moderate TuxCare License Agreement CVE-2025-9086 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-32021: fix symlink vulnerability allowing creation of hardlinks to arbitrary files in local source repository cloning Important TuxCare License Agreement CVE-2024-32021 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update to MySQL 8.0.44 - CVEs fixed: CVE-2025-53040 CVE-2025-53042 CVE-2025-53044 CVE-2025-53045 CVE-2025-53053 CVE-2025-53054 CVE-2025-53062 CVE-2025-53069 Moderate TuxCare License Agreement CVE-2025-53069 CVE-2025-53062 CVE-2025-53040 CVE-2025-53054 CVE-2025-53044 CVE-2025-53042 CVE-2025-53053 CVE-2025-53045 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() {CVE-2023-53803} - md/raid1: Fix stack memory use after return in raid1_reshape {CVE-2025-38445} - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249} - atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459} - dm cache: free background tracker's queued work in {CVE-2023-53765} - drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280,CVE-2022-50440} - vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618} - ice: set tx_tstamps when creating new Tx rings via ethtool {CVE-2022-50710} - sctp: avoid NULL dereference when chunk data buffer is {CVE-2025-40240} - ip6_vti: fix slab-use-after-free in decode_session6 {CVE-2023-53821} - wifi: mac80211_hwsim: drop short frames {CVE-2023-53321} - ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285} - md/raid10: fix null-ptr-deref in raid10_sync_request {CVE-2023-53832} - dm flakey: fix a crash with invalid table line {CVE-2023-53786} - wifi: mt7601u: fix an integer underflow {CVE-2023-53679} - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode {CVE-2022-50638} - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode - ext4: add helper to check quota inums - ext4: fix bug_on in __es_tree_search caused by bad quota inode - quota: Factor out setup of quota inode - USB: usbtmc: Fix direction for 0-length ioctl control messages {CVE-2023-53761} - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer {CVE-2023-53395} - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] {CVE-2024-46815} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116} - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258} - dm raid: fix address sanitizer warning in raid_status {CVE-2022-50084} - vt: Clear selection before changing the font {CVE-2022-49948} - ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917} - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870} - ata: libata-transport: fix double ata_host_put() in ata_tport_add() {CVE-2022-49826} - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix {CVE-2022-49503} - selinux: Add boundary check in put_entry() {CVE-2022-50200} - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails {CVE-2023-53307} - RDMA/mlx5: Return the firmware result upon destroying QP/RQ {CVE-2023-53286} - sched/fair: Don't balance task to its current running CPU {CVE-2023-53215} - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366} - ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address {CVE-2022-50320} - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() {CVE-2022-50881} - slcan: Don't transmit uninitialized stack data in padding {CVE-2020-11494} - media: dvb-frontends: avoid stack overflow warnings with clang {CVE-2024-27075} - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free {CVE-2023-53446} - cifs: Fix warning and UAF when destroy the MR list {CVE-2023-53427} - sctp: fix a potential overflow in sctp_ifwdtsn_skip {CVE-2023-53372} - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter {CVE-2023-53357} - lwt: Fix return values of BPF xmit ops {CVE-2023-53338} - ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265} - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() {CVE-2022-50423} - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419} - ACPICA: Fix error code path in acpi_ds_call_control_method() {CVE-2022-50411} - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315} - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace {CVE-2023-54286} Important TuxCare License Agreement CVE-2023-53372 CVE-2022-50423 CVE-2022-49917 CVE-2023-53286 CVE-2023-53285 CVE-2022-50366 CVE-2023-53116 CVE-2023-53832 CVE-2022-50638 CVE-2025-38618 CVE-2022-50315 CVE-2022-50411 CVE-2022-50881 CVE-2025-38249 CVE-2024-27075 CVE-2023-53761 CVE-2022-49503 CVE-2022-50084 CVE-2022-36280 CVE-2023-53395 CVE-2023-53679 CVE-2025-40240 CVE-2024-46815 CVE-2025-38459 CVE-2023-53446 CVE-2023-53338 CVE-2022-50320 CVE-2023-53307 CVE-2025-38445 CVE-2023-53215 CVE-2023-53357 CVE-2022-49948 CVE-2023-53321 CVE-2022-50258 CVE-2023-53786 CVE-2023-54286 CVE-2022-49826 CVE-2023-53821 CVE-2022-49870 CVE-2022-50419 CVE-2022-50710 CVE-2022-50440 CVE-2023-53765 CVE-2023-53265 CVE-2023-53427 CVE-2023-53803 CVE-2022-50200 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-66200: don't use request notes for suexec, stop accepting the obscure "note" option in RequestHeader - CVE-2025-65082: fix precedence of envvars from HTTP headers and Apache configuration Moderate TuxCare License Agreement CVE-2025-65082 CVE-2025-66200 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-68973: fix faulty double increment Important TuxCare License Agreement CVE-2025-68973 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-14178: fix heap buffer overflow in array_merge() due to integer overflow in zend_hash_num_elements() precomputation. Important TuxCare License Agreement CVE-2025-14178 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-58436: fix issue where slow messages could delay cupsd Moderate TuxCare License Agreement CVE-2025-58436 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-12084: fix quadratic algorithm in _clear_id_cache method when building nested elements using xml.dom.minidom appendChild() method Moderate TuxCare License Agreement CVE-2025-12084 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-12084: prevent quadratic algorithm when building nested elements by optimizing _clear_id_cache() dependency Moderate TuxCare License Agreement CVE-2025-12084 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-13601: fix incorrect buffer size calculation in g_escape_uri_string Important TuxCare License Agreement CVE-2025-13601 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to shenandoah-jdk8u482-b08 (GA) fixing the following CVE: - CVE-2026-21945: enhance certificate checking - CVE-2026-21925: improve JMX connections - CVE-2026-21933: improve HttpServer request handling Important TuxCare License Agreement CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-24515: make XML_ExternalEntityParserCreate copy unknown encoding handler user data Low TuxCare License Agreement CVE-2026-24515 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex() Important TuxCare License Agreement CVE-2025-69421 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - net/ieee802154: don't warn zero-sized raw_sendmsg() {CVE-2022-50706} - bpf: Don't redirect packets with invalid pkt_len {CVE-2022-49975} - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680} - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network {CVE-2022-49865} - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676} - ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668} - binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} - lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484} - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} - i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853} - fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691} - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue {CVE-2022-50164} - mptcp: fix race condition in mptcp_schedule_work() {CVE-2025-40258} - fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322} - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051} - net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180} - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039} - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863} - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} - xfrm: Duplicate SPI Handling {CVE-2025-39797} - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input {CVE-2022-50030} - net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent {CVE-2022-48883} - net/mlx5e: Move representor neigh cleanup to profile cleanup_tx {CVE-2023-54148} - dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085} - Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982} - ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() {CVE-2022-50050} - platform/x86: wmi: Fix opening of char device {CVE-2023-52864} - nfs: fix UAF in direct writes {CVE-2024-26958} - iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406} - drm/amdkfd: Fix an illegal memory access {CVE-2023-53090} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} - scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546} - ALSA: pcm: Fix potential data race at PCM memory allocation helpers {CVE-2023-54072} - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes {CVE-2023-53077} - net: bridge: use DEV_STATS_INC() {CVE-2023-52578} - i40e: fix idx validation in config queues msg {CVE-2025-39971} - loop: Fix use-after-free issues {CVE-2023-53111} - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117} - media: rc: fix races with imon_disconnect() {CVE-2025-39993} - fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198} - vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248} - Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749} - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid {CVE-2025-37927} - tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923} - jbd2: remove wrong sb->s_sequence check {CVE-2025-37839} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729} - libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285} - mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432} - tracing: Fix wild-memory-access in register_synth_event() {CVE-2022-49799} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update {CVE-2024-35855} - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885} - scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} - kobject_uevent: Fix OOB access within zap_modalias_env() {CVE-2024-42292} - RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872} - ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886} - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093} - drm/shmem-helper: Remove another errant put in error path {CVE-2023-53084} - wifi: mac80211: Fix UAF in ieee80211_scan_rx() {CVE-2022-49934} - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() {CVE-2022-50185} - ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403} - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279} - ftrace: Fix UAF when lookup kallsym after ftrace disabled {CVE-2025-38346} - nbd: fix incomplete validation of ioctl arg {CVE-2023-53513} - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245} - net: atm: add lec_mutex {CVE-2025-38323} - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000} - net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907} - be2net: Fix buffer overflow in be_get_module_eeprom {CVE-2022-49581} - isofs: Prevent the use of too small fid {CVE-2025-37780} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277} - drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120} - dm raid: fix accesses beyond end of raid member array {CVE-2022-49674} - ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075} - usbnet: Fix linkwatch use-after-free on disconnect {CVE-2022-50220} - wifi: cfg80211: Fix use after free for wext {CVE-2023-53153} - igb: Do not free q_vector unless new one was allocated {CVE-2022-50252} - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955} - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024} - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259} - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow {CVE-2023-54102} - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device {CVE-2023-54015} - perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586} - sctp: handle the error returned from sctp_auth_asoc_init_active_key {CVE-2022-50243} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit {CVE-2024-27395} - media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627} - leds: trigger: Unregister sysfs attributes before calling deactivate() {CVE-2024-43830} Important TuxCare License Agreement CVE-2021-47118 CVE-2025-37927 CVE-2023-54148 CVE-2023-53305 CVE-2025-38724 CVE-2023-53077 CVE-2023-52764 CVE-2023-52594 CVE-2023-53075 CVE-2022-50050 CVE-2024-35855 CVE-2022-50243 CVE-2024-42292 CVE-2023-53000 CVE-2024-35886 CVE-2024-26872 CVE-2024-43830 CVE-2022-50706 CVE-2023-52885 CVE-2022-50185 CVE-2022-50279 CVE-2023-52864 CVE-2025-39971 CVE-2023-53084 CVE-2023-52578 CVE-2025-37839 CVE-2024-27395 CVE-2024-38627 CVE-2022-50164 CVE-2022-48883 CVE-2025-37923 CVE-2024-38586 CVE-2024-39487 CVE-2022-49674 CVE-2022-50103 CVE-2025-38051 CVE-2025-38212 CVE-2025-37749 CVE-2025-38245 CVE-2025-38403 CVE-2022-49581 CVE-2022-50252 CVE-2024-26982 CVE-2024-40978 CVE-2022-21546 CVE-2022-49799 CVE-2023-52835 CVE-2022-50403 CVE-2024-26958 CVE-2021-47153 CVE-2023-53111 CVE-2024-26961 CVE-2024-38555 CVE-2025-38157 CVE-2025-38323 CVE-2022-50220 CVE-2025-40154 CVE-2025-40186 CVE-2025-37780 CVE-2024-42120 CVE-2023-53039 CVE-2025-38574 CVE-2025-38180 CVE-2022-49975 CVE-2025-38024 CVE-2025-38198 CVE-2023-53432 CVE-2025-38729 CVE-2025-39993 CVE-2023-54102 CVE-2023-54072 CVE-2025-38415 CVE-2025-38346 CVE-2023-53153 CVE-2022-49907 CVE-2022-50085 CVE-2023-53484 CVE-2022-50030 CVE-2022-49934 CVE-2025-38572 CVE-2025-37823 CVE-2025-39797 CVE-2023-53673 CVE-2025-39863 CVE-2025-38556 CVE-2025-38680 CVE-2022-50093 CVE-2023-54015 CVE-2025-39853 CVE-2025-40258 CVE-2025-39691 CVE-2025-40269 CVE-2025-68349 CVE-2023-53117 CVE-2023-53259 CVE-2022-49865 CVE-2022-50406 CVE-2023-53668 CVE-2022-50497 CVE-2023-53513 CVE-2025-68349 CVE-2023-53117 CVE-2023-53259 CVE-2022-49865 CVE-2022-50406 CVE-2022-50497 CVE-2023-53513 CVE-2023-53676 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-14087: fix integer overflow when parsing (byte)strings Critical TuxCare License Agreement CVE-2025-14087 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-15366: reject control characters in IMAP commands - CVE-2025-15367: reject control characters in POP3 commands - CVE-2026-1299: reject the incorrectly folded headers in "BytesGenerator" Important TuxCare License Agreement CVE-2025-15366 CVE-2025-15367 CVE-2026-1299 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-1299: reject email header values containing newlines without whitespace to prevent header injection and info leak via the buffer protocol - CVE-2024-6923: ensure email headers are encoded and verified correctly, raising exceptions for malformed input to prevent processing of invalid or dangerous headers Important TuxCare License Agreement CVE-2024-6923 CVE-2026-1299 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-61662: fix use-after-free in gettext/gettext due to unregistered gettext command on module unload Important TuxCare License Agreement CVE-2025-61662 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-15367: reject control characters in POP3 commands to prevent command injection via embedded newlines Important TuxCare License Agreement CVE-2025-15366 CVE-2025-15367 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-69419: fix one-byte write-before-buffer triggered by malicious PKCS#12 BMPString containing non-ASCII BMP code point; validate UTF8_putc return and use correct destination capacity during conversion from UTF-16BE into UTF-8 Important TuxCare License Agreement CVE-2025-69419 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739} - drivers: base: Free devm resources when unregistering a device {CVE-2023-53596} - usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760} - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} - net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744} - ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673} - xfrm: fix slab-use-after-free in decode_session6 {CVE-2023-53500} - net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538} - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680} - perf/core: Exit early on perf_mmap() fail {CVE-2025-38565} - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} - fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271} - virtio_net: fix xdp_rxq_info bug after suspend/resume {CVE-2022-49687} - NFSD: Fix the behavior of READ near OFFSET_MAX {CVE-2022-48827} - usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967} - netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042} - netfilter: validate user input for expected length {CVE-2024-35896} - erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053} - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422} - i40e: remove read access to debugfs files {CVE-2025-39901} - wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937} - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind {CVE-2025-68305} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022} - netfilter: allow exp not to be removed in nf_ct_find_expectation {CVE-2023-52927} - dm-bufio: don't schedule in atomic context {CVE-2025-37928} - HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020} - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201} - fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866} - tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560} - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() {CVE-2024-35791} - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521} - dm cache: Fix UAF in destroy() {CVE-2022-50496} - xhci: Remove device endpoints from bandwidth list when freeing the device {CVE-2022-50470} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800} - net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074} - igb: Do not bring the device up after non-fatal error {CVE-2024-50040} - wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891} - HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304} - HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454} - udf: Do not bother merging very long extents {CVE-2023-53506} - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551} - ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587} - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path {CVE-2023-53604} - gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622} - iavf: Fix use-after-free in free_netdev {CVE-2023-53556} - cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945} - kernfs: fix use-after-free in __kernfs_remove {CVE-2022-50432} - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. {CVE-2025-39913} - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() {CVE-2022-50865} - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras {CVE-2023-53471} - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf {CVE-2023-53524} - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write {CVE-2023-53282} - rcu: Fix rcu_read_unlock() deadloop due to IRQ work {CVE-2025-39744} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length {CVE-2025-39933} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883} - ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770} - wifi: iwlwifi: fix a memory corruption {CVE-2024-26610} - asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101} - igb: Fix igb_down hung on surprise removal {CVE-2023-53148} - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102} Important TuxCare License Agreement CVE-2023-53454 CVE-2025-39911 CVE-2023-53622 CVE-2022-48827 CVE-2021-47101 CVE-2025-40304 CVE-2025-39866 CVE-2022-50551 CVE-2025-39901 CVE-2024-35791 CVE-2024-41042 CVE-2025-39883 CVE-2024-35965 CVE-2024-41069 CVE-2024-35937 CVE-2023-53148 CVE-2024-50040 CVE-2023-53680 CVE-2025-39744 CVE-2022-48744 CVE-2024-36921 CVE-2023-53619 CVE-2025-38201 CVE-2024-35967 CVE-2025-38022 CVE-2024-35896 CVE-2022-50470 CVE-2023-53524 CVE-2025-68800 CVE-2025-39933 CVE-2023-53282 CVE-2022-50496 CVE-2023-53556 CVE-2025-22022 CVE-2026-23074 CVE-2023-53560 CVE-2023-53604 CVE-2025-39824 CVE-2025-39913 CVE-2025-39945 CVE-2025-38102 CVE-2022-49770 CVE-2022-50673 CVE-2025-38494 CVE-2022-50865 CVE-2024-26610 CVE-2022-50432 CVE-2024-35966 CVE-2023-52927 CVE-2023-53521 CVE-2023-53471 CVE-2024-38538 CVE-2025-37928 CVE-2022-50422 CVE-2023-53587 CVE-2025-38565 CVE-2025-38685 CVE-2025-40271 CVE-2024-26739 CVE-2022-50386 CVE-2025-39760 CVE-2023-53506 CVE-2023-53596 CVE-2024-56616 CVE-2023-53500 CVE-2022-49687 CVE-2025-39891 CVE-2023-53053 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-14524: prevent bearer token leak on cross-protocol redirect - CVE-2025-15079: set both SSH knownhosts options to the same file to prevent libssh global known_hosts override Low TuxCare License Agreement CVE-2025-14524 CVE-2025-15079 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update Intel CPU microcode to 20251111: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000410; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000650; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3d; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x43a; - Addition of cpuid:A06E1/0x97 microcode (in microcode.dat) at revision 0x1000273; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x132; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x6133; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x11a; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002c0; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003f7; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000639; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4128; - Removal of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x118; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002a9; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd000404 up to 0xd000410; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002d0 up to 0x10002e0; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c0003f7 up to 0x2c000410; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000639 up to 0x2b000650; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c0003f7 up to 0x2c000410; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000639 up to 0x2b000650; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c0003f7 up to 0x2c000410; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000639 up to 0x2b000650; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000639 up to 0x2b000650; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0xa up to 0xb; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x437 up to 0x43a; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x24 up to 0x25; - Update of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) from revision 0xa0000d1 up to 0xa000124; - Update of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) from revision 0x10003a2 up to 0x10003f0; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000341 up to 0x3000382; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12f up to 0x132; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4128 up to 0x6133; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4128 up to 0x6133; - Update of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) from revision 0x11f up to 0x125; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1d up to 0x1e; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) from revision 0x118 up to 0x11a; - Update of cpuid:C0664/0x82 microcode (in microcode.dat) from revision 0x118 up to 0x11a; - Update of cpuid:C06A2/0x82 microcode (in microcode.dat) from revision 0x118 up to 0x11a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x210002a9 up to 0x210002c0; Important TuxCare License Agreement CVE-2024-28127 CVE-2024-29214 CVE-2023-34440 CVE-2023-43758 CVE-2024-24582 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-15224: fix libssh public-key auth fallback to SSH agent Low TuxCare License Agreement CVE-2025-15224 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-25210: fix integer overflow in tag buffer reallocation in doContent function Important TuxCare License Agreement CVE-2026-25210 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-3731: fix off-by-one in sftp_extensions_get_name/sftp_extensions_get_data Important TuxCare License Agreement CVE-2026-3731 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-1965: fix incorrect connection reuse; prevent reuse of Negotiate- authenticated connections with different credentials and require authentication identity match - CVE-2026-3784: fix wrong proxy connection reuse with different credentials; check proxy user/password in proxy_info_matches to prevent reuse of HTTP proxy CONNECT connections when credentials differ - CVE-2026-3783: prevent bearer token leak on HTTP(S) redirect when .netrc contains entries for the redirected host Moderate TuxCare License Agreement CVE-2026-1965 CVE-2026-3783 CVE-2026-3784 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-25986: heap buffer overflow write in YUV decoder when image dimensions are not properly validated Critical TuxCare License Agreement CVE-2026-25986 CVE-2026-25987 CVE-2026-25971 CVE-2026-25983 CVE-2026-25898 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-57807: heap buffer overflow in WriteBlobStream and WriteBlob via incorrect extent calculation when offset exceeds current capacity Critical TuxCare License Agreement CVE-2025-57807 CVE-2026-23876 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-25968: stack buffer overflow in MSL image-processing language via WriteMSLImage recursion - CVE-2026-25897: out-of-bounds heap write in SUN decoder on 32-bit systems via integer overflow in pixel buffer allocation - CVE-2025-53014: out-of-bounds read in InterpretImageFilename when processing escaped percent characters - CVE-2025-53101: out-of-bounds read in InterpretImageFilename via missing bounds check on format specifier parsing Critical TuxCare License Agreement CVE-2026-25968 CVE-2026-25897 CVE-2025-53101 CVE-2025-53014 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-3497: fix information disclosure or denial of service due to uninitialized variables in GSSAPI key exchange Important TuxCare License Agreement CVE-2026-3497 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-53019: fix memory leak in StreamImage with multiple %d in filename template - CVE-2025-55212: fix division-by-zero in ThumbnailImage via zero-dimension geometry - CVE-2026-25795: fix NULL dereference in ReadSFWImage on temp file failure - CVE-2026-25799: fix division-by-zero in YUV sampling factor validation - CVE-2026-26066: fix infinite loop in formatIPTC writing invalid IPTC data Important TuxCare License Agreement CVE-2026-25795 CVE-2025-55212 CVE-2026-25799 CVE-2026-26066 CVE-2025-53019 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-57803: fix integer overflow in BMP reader stride computation Critical TuxCare License Agreement CVE-2025-57803 CVE-2026-26284 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-32748: ICP: fix HttpRequest lifetime for ICP v3 queries - CVE-2026-33515: ICP: fix validation of packet sizes and URLs - CVE-2026-33526: do not escape malformed URI twice when sending ICP errors Important TuxCare License Agreement CVE-2026-33526 CVE-2026-32748 CVE-2026-33515 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-11082: Fix heap-based buffer overflow in _bfd_elf_parse_eh_frame triggered by crafted EH frame data; apply patches ea1a0737c769 and e4f355f13be Important TuxCare License Agreement CVE-2025-11082 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-32636: out-of-bounds write of a single zero byte in ConvertUTF16ToUTF8 via NewXMLTree when resizing UTF-8 buffer Important TuxCare License Agreement CVE-2026-25970 CVE-2026-30883 CVE-2026-25966 CVE-2025-62171 CVE-2026-23952 CVE-2026-25796 CVE-2026-32636 CVE-2026-27798 CVE-2026-26283 CVE-2025-69204 CVE-2025-55298 CVE-2026-25988 CVE-2026-25965 CVE-2025-55154 CVE-2026-25798 CVE-2025-68618 cpe:/o:centos:centos:8 /etc/centos-release CentOS Linux release 8\.5 1 /etc/els-release CentOS Linux release 8 \(Final, ELS by Cloudlinux\) 1 polkit polkit-devel polkit-docs polkit-libs cryptsetup cryptsetup-devel cryptsetup-libs cryptsetup-reencrypt integritysetup veritysetup ctdb libsmbclient libsmbclient-devel libwbclient libwbclient-devel python3-samba python3-samba-devel python3-samba-test samba samba-client samba-client-libs samba-common samba-common-libs samba-common-tools samba-devel samba-krb5-printing samba-libs samba-pidl samba-test samba-test-libs samba-vfs-iouring samba-winbind samba-winbind-clients samba-winbind-krb5-locator samba-winbind-modules samba-winexe zsh zsh-html python3-rpm rpm rpm-apidocs rpm-build rpm-build-libs rpm-cron rpm-devel rpm-libs rpm-plugin-fapolicyd rpm-plugin-ima rpm-plugin-prioreset rpm-plugin-selinux rpm-plugin-syslog rpm-plugin-systemd-inhibit rpm-sign bind bind-chroot bind-devel bind-export-devel bind-export-libs bind-libs bind-libs-lite bind-license bind-lite-devel bind-pkcs11 bind-pkcs11-devel bind-pkcs11-libs bind-pkcs11-utils bind-sdb bind-sdb-chroot bind-utils python3-bind cups cups-client cups-devel cups-filesystem cups-ipptool cups-libs cups-lpd curl curl-minimal libcurl libcurl-devel libcurl-minimal compat-libpthread-nonshared glibc glibc-all-langpacks glibc-benchtests glibc-common glibc-devel glibc-headers glibc-langpack-aa glibc-langpack-af glibc-langpack-agr glibc-langpack-ak glibc-langpack-am glibc-langpack-an glibc-langpack-anp glibc-langpack-ar glibc-langpack-as glibc-langpack-ast glibc-langpack-ayc glibc-langpack-az glibc-langpack-be glibc-langpack-bem glibc-langpack-ber glibc-langpack-bg glibc-langpack-bhb glibc-langpack-bho glibc-langpack-bi glibc-langpack-bn glibc-langpack-bo glibc-langpack-br glibc-langpack-brx glibc-langpack-bs glibc-langpack-byn glibc-langpack-ca glibc-langpack-ce glibc-langpack-chr glibc-langpack-cmn glibc-langpack-crh glibc-langpack-cs glibc-langpack-csb glibc-langpack-cv glibc-langpack-cy glibc-langpack-da glibc-langpack-de glibc-langpack-doi glibc-langpack-dsb glibc-langpack-dv glibc-langpack-dz glibc-langpack-el glibc-langpack-en glibc-langpack-eo glibc-langpack-es glibc-langpack-et glibc-langpack-eu glibc-langpack-fa glibc-langpack-ff glibc-langpack-fi glibc-langpack-fil glibc-langpack-fo glibc-langpack-fr glibc-langpack-fur glibc-langpack-fy glibc-langpack-ga glibc-langpack-gd glibc-langpack-gez glibc-langpack-gl glibc-langpack-gu glibc-langpack-gv glibc-langpack-ha glibc-langpack-hak glibc-langpack-he glibc-langpack-hi glibc-langpack-hif glibc-langpack-hne glibc-langpack-hr glibc-langpack-hsb glibc-langpack-ht glibc-langpack-hu glibc-langpack-hy glibc-langpack-ia glibc-langpack-id glibc-langpack-ig glibc-langpack-ik glibc-langpack-is glibc-langpack-it glibc-langpack-iu glibc-langpack-ja glibc-langpack-ka glibc-langpack-kab glibc-langpack-kk glibc-langpack-kl glibc-langpack-km glibc-langpack-kn glibc-langpack-ko glibc-langpack-kok glibc-langpack-ks glibc-langpack-ku glibc-langpack-kw glibc-langpack-ky glibc-langpack-lb glibc-langpack-lg glibc-langpack-li glibc-langpack-lij glibc-langpack-ln glibc-langpack-lo glibc-langpack-lt glibc-langpack-lv glibc-langpack-lzh glibc-langpack-mag glibc-langpack-mai glibc-langpack-mfe glibc-langpack-mg glibc-langpack-mhr glibc-langpack-mi glibc-langpack-miq glibc-langpack-mjw glibc-langpack-mk glibc-langpack-ml glibc-langpack-mn glibc-langpack-mni glibc-langpack-mr glibc-langpack-ms glibc-langpack-mt glibc-langpack-my glibc-langpack-nan glibc-langpack-nb glibc-langpack-nds glibc-langpack-ne glibc-langpack-nhn glibc-langpack-niu glibc-langpack-nl glibc-langpack-nn glibc-langpack-nr glibc-langpack-nso glibc-langpack-oc glibc-langpack-om glibc-langpack-or glibc-langpack-os glibc-langpack-pa glibc-langpack-pap glibc-langpack-pl glibc-langpack-ps glibc-langpack-pt glibc-langpack-quz glibc-langpack-raj glibc-langpack-ro glibc-langpack-ru glibc-langpack-rw glibc-langpack-sa glibc-langpack-sah glibc-langpack-sat glibc-langpack-sc glibc-langpack-sd glibc-langpack-se glibc-langpack-sgs glibc-langpack-shn glibc-langpack-shs glibc-langpack-si glibc-langpack-sid glibc-langpack-sk glibc-langpack-sl glibc-langpack-sm glibc-langpack-so glibc-langpack-sq glibc-langpack-sr glibc-langpack-ss glibc-langpack-st glibc-langpack-sv glibc-langpack-sw glibc-langpack-szl glibc-langpack-ta glibc-langpack-tcy glibc-langpack-te glibc-langpack-tg glibc-langpack-th glibc-langpack-the glibc-langpack-ti glibc-langpack-tig glibc-langpack-tk glibc-langpack-tl glibc-langpack-tn glibc-langpack-to glibc-langpack-tpi glibc-langpack-tr glibc-langpack-ts glibc-langpack-tt glibc-langpack-ug glibc-langpack-uk glibc-langpack-unm glibc-langpack-ur glibc-langpack-uz glibc-langpack-ve glibc-langpack-vi glibc-langpack-wa glibc-langpack-wae glibc-langpack-wal glibc-langpack-wo glibc-langpack-xh glibc-langpack-yi glibc-langpack-yo glibc-langpack-yue glibc-langpack-yuw glibc-langpack-zh glibc-langpack-zu glibc-locale-source glibc-minimal-langpack glibc-nss-devel glibc-static glibc-utils libnsl nscd nss_db nss_hesiod openssl openssl-devel openssl-libs openssl-perl openssl-static rsync rsync-daemon gd gd-devel gd-progs /etc/dnf/modules.d/httpd.module \[httpd\][\w\W]* 1 httpd httpd-devel httpd-filesystem httpd-manual httpd-tools mod_http2 mod_ldap mod_md mod_proxy_html mod_session mod_ssl /etc/dnf/modules.d/php.module \[php\][\w\W]* 1 apcu-panel libzip libzip-devel libzip-tools php php-bcmath php-cli php-common php-dba php-dbg php-devel php-embedded php-enchant php-ffi php-fpm php-gd php-gmp php-intl php-json php-ldap php-mbstring php-mysqlnd php-odbc php-opcache php-pdo php-pear php-pecl-apcu php-pecl-apcu-devel php-pecl-rrd php-pecl-xdebug php-pecl-zip php-pgsql php-process php-snmp php-soap php-xml php-xmlrpc rsyslog rsyslog-crypto rsyslog-doc rsyslog-elasticsearch rsyslog-gnutls rsyslog-gssapi rsyslog-kafka rsyslog-mmaudit rsyslog-mmjsonparse rsyslog-mmkubernetes rsyslog-mmnormalize rsyslog-mmsnmptrapd rsyslog-mysql rsyslog-omamqp1 rsyslog-openssl rsyslog-pgsql rsyslog-relp rsyslog-snmp rsyslog-udpspoof binutils binutils-devel /etc/dnf/modules.d/virt.module \[virt\][\w\W]* 1 hivex hivex-devel libguestfs libguestfs-bash-completion libguestfs-benchmarking libguestfs-devel libguestfs-gfs2 libguestfs-gobject libguestfs-gobject-devel libguestfs-inspect-icons libguestfs-java libguestfs-java-devel libguestfs-javadoc libguestfs-man-pages-ja libguestfs-man-pages-uk libguestfs-rescue libguestfs-rsync libguestfs-tools libguestfs-tools-c libguestfs-winsupport libguestfs-xfs libiscsi libiscsi-devel libiscsi-utils libnbd libnbd-devel libvirt libvirt-admin libvirt-bash-completion libvirt-client libvirt-daemon libvirt-daemon-config-network libvirt-daemon-config-nwfilter libvirt-daemon-driver-interface libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-gluster libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-kvm libvirt-dbus libvirt-devel libvirt-docs libvirt-libs libvirt-lock-sanlock libvirt-nss lua-guestfs nbdfuse nbdkit nbdkit-bash-completion nbdkit-basic-filters nbdkit-basic-plugins nbdkit-curl-plugin nbdkit-devel nbdkit-example-plugins nbdkit-gzip-plugin nbdkit-linuxdisk-plugin nbdkit-python-plugin nbdkit-server nbdkit-ssh-plugin nbdkit-vddk-plugin nbdkit-xz-filter netcf netcf-devel netcf-libs ocaml-hivex ocaml-hivex-devel ocaml-libguestfs ocaml-libguestfs-devel ocaml-libnbd ocaml-libnbd-devel perl-Sys-Guestfs perl-Sys-Virt perl-hivex python3-hivex python3-libguestfs python3-libnbd python3-libvirt qemu-guest-agent qemu-img qemu-kvm qemu-kvm-block-curl qemu-kvm-block-gluster qemu-kvm-block-iscsi qemu-kvm-block-rbd qemu-kvm-block-ssh qemu-kvm-common qemu-kvm-core qemu-kvm-tests ruby-hivex ruby-libguestfs seabios seabios-bin seavgabios-bin sgabios sgabios-bin supermin supermin-devel virt-dib virt-v2v java-1.8.0-openjdk java-1.8.0-openjdk-accessibility java-1.8.0-openjdk-accessibility-fastdebug java-1.8.0-openjdk-accessibility-slowdebug java-1.8.0-openjdk-demo java-1.8.0-openjdk-demo-fastdebug java-1.8.0-openjdk-demo-slowdebug java-1.8.0-openjdk-devel java-1.8.0-openjdk-devel-fastdebug java-1.8.0-openjdk-devel-slowdebug java-1.8.0-openjdk-fastdebug java-1.8.0-openjdk-headless java-1.8.0-openjdk-headless-fastdebug java-1.8.0-openjdk-headless-slowdebug java-1.8.0-openjdk-javadoc java-1.8.0-openjdk-javadoc-zip java-1.8.0-openjdk-slowdebug java-1.8.0-openjdk-src java-1.8.0-openjdk-src-fastdebug java-1.8.0-openjdk-src-slowdebug openldap openldap-clients openldap-devel openldap-servers openssh openssh-askpass openssh-cavs openssh-clients openssh-keycat openssh-ldap openssh-server pam_ssh_agent_auth /etc/dnf/modules.d/squid.module \[squid\][\w\W]* 1 libecap libecap-devel squid zlib zlib-devel zlib-static /etc/dnf/modules.d/nginx.module \[nginx\][\w\W]* 1 nginx nginx-all-modules nginx-filesystem nginx-mod-http-image-filter nginx-mod-http-perl nginx-mod-http-xslt-filter nginx-mod-mail nginx-mod-stream /etc/dnf/modules.d/python27.module \[python27\][\w\W]* 1 babel python-nose-docs python-psycopg2-doc python-sqlalchemy-doc python2 python2-Cython python2-PyMySQL python2-attrs python2-babel python2-backports python2-backports-ssl_match_hostname python2-bson python2-chardet python2-coverage python2-debug python2-devel python2-dns python2-docs python2-docs-info python2-docutils python2-funcsigs python2-idna python2-ipaddress python2-jinja2 python2-libs python2-lxml python2-markupsafe python2-mock python2-nose python2-numpy python2-numpy-doc python2-numpy-f2py python2-pip python2-pip-wheel python2-pluggy python2-psycopg2 python2-psycopg2-debug python2-psycopg2-tests python2-py python2-pygments python2-pymongo python2-pymongo-gridfs python2-pysocks python2-pytest python2-pytest-mock python2-pytz python2-pyyaml python2-requests python2-rpm-macros python2-scipy python2-setuptools python2-setuptools-wheel python2-setuptools_scm python2-six python2-sqlalchemy python2-test python2-tkinter python2-tools python2-urllib3 python2-virtualenv python2-wheel python2-wheel-wheel libxml2 libxml2-devel libxml2-static python3-libxml2 /etc/dnf/modules.d/javapackages-tools.module \[javapackages\-tools\][\w\W]* 1 log4j12 log4j12-javadoc openvpn openvpn-devel bpftool kernel kernel-core kernel-cross-headers kernel-debug kernel-debug-core kernel-debug-devel kernel-debug-modules kernel-debug-modules-extra kernel-debug-modules-internal kernel-devel kernel-headers kernel-ipaclones-internal kernel-modules kernel-modules-extra kernel-modules-internal kernel-selftests-internal kernel-tools kernel-tools-libs kernel-tools-libs-devel perf python3-perf /etc/dnf/modules.d/python36.module \[python36\][\w\W]* 1 platform-python platform-python-debug platform-python-devel python3-devel python3-idle python3-libs python3-test python3-tkinter cyrus-sasl cyrus-sasl-devel cyrus-sasl-gs2 cyrus-sasl-gssapi cyrus-sasl-ldap cyrus-sasl-lib cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain cyrus-sasl-scram cyrus-sasl-sql gzip dovecot dovecot-devel dovecot-mysql dovecot-pgsql dovecot-pigeonhole /etc/dnf/modules.d/subversion.module \[subversion\][\w\W]* 1 libserf libserf-devel mod_dav_svn subversion subversion-devel subversion-gnome subversion-javahl subversion-libs subversion-perl subversion-ruby subversion-tools utf8proc utf8proc-devel expat expat-devel expat-static exim exim-greylist exim-mon exim-mysql exim-pgsql gnupg2 gnupg2-smime systemd systemd-container systemd-devel systemd-journal-remote systemd-libs systemd-pam systemd-tests systemd-udev lemon sqlite sqlite-analyzer sqlite-devel sqlite-doc sqlite-libs sqlite-tcl perl perl-Attribute-Handlers perl-Devel-Peek perl-Devel-SelfStubber perl-Errno perl-ExtUtils-Embed perl-ExtUtils-Miniperl perl-IO perl-IO-Zlib perl-Locale-Maketext-Simple perl-Math-Complex perl-Memoize perl-Module-Loaded perl-Net-Ping perl-Pod-Html perl-SelfLoader perl-Test perl-Time-Piece perl-devel perl-interpreter perl-libnetcfg perl-libs perl-macros perl-open perl-tests perl-utils xz xz-devel xz-libs xz-lzma-compat xz-static xterm xterm-resize /etc/dnf/modules.d/mysql.module \[mysql\][\w\W]* 1 mysql mysql-common mysql-devel mysql-errmsg mysql-libs mysql-server mysql-test krb5-devel krb5-libs krb5-pkinit krb5-server krb5-server-ldap krb5-workstation libkadm5 sudo sudo-devel git git-all git-core git-core-doc git-credential-libsecret git-daemon git-email git-gui git-instaweb git-subtree git-svn gitk gitweb perl-Git perl-Git-SVN nss nss-devel nss-pkcs11-devel nss-softokn nss-softokn-devel nss-softokn-freebl nss-softokn-freebl-devel nss-sysinit nss-tools nss-util nss-util-devel tar grub2-common grub2-efi-ia32 grub2-efi-ia32-cdboot grub2-efi-ia32-modules grub2-efi-x64 grub2-efi-x64-cdboot grub2-efi-x64-modules grub2-pc grub2-pc-modules grub2-tools grub2-tools-efi grub2-tools-extra grub2-tools-minimal libssh libssh-config libssh-devel sysstat gnutls gnutls-c++ gnutls-dane gnutls-devel gnutls-utils dhcp-client dhcp-common dhcp-devel dhcp-devel-doc dhcp-libs dhcp-relay dhcp-server iwl100-firmware iwl1000-firmware iwl105-firmware iwl135-firmware iwl2000-firmware iwl2030-firmware iwl3160-firmware iwl3945-firmware iwl4965-firmware iwl5000-firmware iwl5150-firmware iwl6000-firmware iwl6000g2a-firmware iwl6000g2b-firmware iwl6050-firmware iwl7260-firmware libertas-sd8686-firmware libertas-sd8787-firmware libertas-usb8388-firmware libertas-usb8388-olpc-firmware linux-firmware amanda amanda-client amanda-libs amanda-server libwebp libwebp-devel libwebp-java libwebp-tools glib2 glib2-devel glib2-doc glib2-fam glib2-static glib2-tests libksba libksba-devel microcode_ctl haproxy shim-ia32 shim-x64 unixODBC unixODBC-devel less pam pam-devel procps-ng procps-ng-devel procps-ng-i18n vorbis-tools wget bzip2 bzip2-devel bzip2-libs bzip2-static cpp gcc gcc-c++ gcc-gdb-plugin gcc-gfortran gcc-offload-nvptx gcc-plugin-devel libasan libasan-static libatomic libatomic-static libgcc libgfortran libgfortran-static libgomp libgomp-offload-nvptx libitm libitm-devel libitm-static liblsan liblsan-static libquadmath libquadmath-devel libquadmath-static libstdc++ libstdc++-devel libstdc++-docs libstdc++-static libtsan libtsan-static libubsan libubsan-static libtasn1 libtasn1-devel libtasn1-tools libfastjson libfastjson-devel dmidecode perl-HTTP-Tiny perl-CPAN ImageMagick ImageMagick-c++ ImageMagick-c++-devel ImageMagick-devel ImageMagick-djvu ImageMagick-doc ImageMagick-libs ImageMagick-perl x86_64 0:0.115-12.el8.5.tuxcare.els1 05b555b38483c65d 8c55a6628608cb71 i686|x86_64 0:0.115-12.el8.5.tuxcare.els1 0:0.115-12.el8.5.tuxcare.els1 x86_64 0:0.115-12.el8.5.tuxcare.els2 i686|x86_64 0:0.115-12.el8.5.tuxcare.els2 0:0.115-12.el8.5.tuxcare.els2 x86_64 0:2.3.3-4.el8.tuxcare.els1 i686|x86_64 0:2.3.3-4.el8.tuxcare.els1 x86_64 0:4.14.5-7.el8.5.tuxcare.els1 i686|x86_64 0:4.14.5-7.el8.5.tuxcare.els1 0:4.14.5-7.el8.5.tuxcare.els1 x86_64 0:4.14.5-7.el8.5.tuxcare.els2 i686|x86_64 0:4.14.5-7.el8.5.tuxcare.els2 0:4.14.5-7.el8.5.tuxcare.els2 x86_64 0:5.5.1-6.el8.2.tuxcare.els1 0:5.5.1-6.el8.2.tuxcare.els1 x86_64 0:4.14.3-19.el8.5.tuxcare.els1 0:4.14.3-19.el8.5.tuxcare.els1 i686|x86_64 0:4.14.3-19.el8.5.tuxcare.els1 x86_64 32:9.11.26-6.el8.tuxcare.els1 i686|x86_64 32:9.11.26-6.el8.tuxcare.els1 32:9.11.26-6.el8.tuxcare.els1 x86_64 32:9.11.26-6.el8.tuxcare.els2 i686|x86_64 32:9.11.26-6.el8.tuxcare.els2 32:9.11.26-6.el8.tuxcare.els2 x86_64 1:2.2.6-40.el8.tuxcare.els1 i686|x86_64 1:2.2.6-40.el8.tuxcare.els1 1:2.2.6-40.el8.tuxcare.els1 x86_64 0:7.61.1-22.el8.tuxcare.els1 i686|x86_64 0:7.61.1-22.el8.tuxcare.els1 x86_64 0:7.61.1-22.el8.tuxcare.els2 i686|x86_64 0:7.61.1-22.el8.tuxcare.els2 x86_64 0:2.28-164.el8.tuxcare.els1 i686|x86_64 0:2.28-164.el8.tuxcare.els1 x86_64 0:2.28-164.el8.tuxcare.els2 i686|x86_64 0:2.28-164.el8.tuxcare.els2 x86_64 1:1.1.1k-5.el8.5.tuxcare.els1 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els1 x86_64 1:1.1.1k-5.el8.5.tuxcare.els2 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els2 x86_64 0:3.1.3-12.el8.tuxcare.els1 0:3.1.3-12.el8.tuxcare.els1 i686|x86_64 0:2.2.5-7.el8.tuxcare.els1 x86_64 0:2.2.5-7.el8.tuxcare.els1 \nstream\s*=\s*2\.4\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*2\.4\b x86_64 0:2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5 i686|x86_64 0:2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5 0:2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5 x86_64 0:1.15.7-3.module_el8.5.0+2060+6f259f31 x86_64 1:2.0.8-8.module_el8.5.0+2060+6f259f31 x86_64 1:2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5 x86_64 0:2.4.37-43.module_el8.5.0+2005+b30d9eec.tuxcare.els1 0:2.4.37-43.module_el8.5.0+2005+b30d9eec.tuxcare.els1 x86_64 0:1.15.7-3.module_el8.5.0+2005+b30d9eec x86_64 1:2.0.8-8.module_el8.5.0+2005+b30d9eec x86_64 1:2.4.37-43.module_el8.5.0+2005+b30d9eec.tuxcare.els1 x86_64 0:2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2 0:2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2 x86_64 1:2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2 x86_64 0:2.4.37-43.module_el8.5.0+2021+51c6d843.tuxcare.els3 0:2.4.37-43.module_el8.5.0+2021+51c6d843.tuxcare.els3 x86_64 1:2.4.37-43.module_el8.5.0+2021+51c6d843.tuxcare.els3 x86_64 0:2.4.37-43.module_el8.5.0+2046+6f259f31.tuxcare.els4 0:2.4.37-43.module_el8.5.0+2046+6f259f31.tuxcare.els4 x86_64 0:1.15.7-3.module_el8.5.0+2046+6f259f31 x86_64 1:2.0.8-8.module_el8.5.0+2046+6f259f31 x86_64 1:2.4.37-43.module_el8.5.0+2046+6f259f31.tuxcare.els4 x86_64 0:2.4.37-43.module_el8.5.0+2067+6f259f31.tuxcare.els7 0:2.4.37-43.module_el8.5.0+2067+6f259f31.tuxcare.els7 x86_64 1:2.4.37-43.module_el8.5.0+2067+6f259f31.tuxcare.els7 \nstream\s*=\s*7\.4\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*7\.4\b 0:5.1.18-1.module_el8.5.0+2017+cc873159 x86_64 0:1.6.1-1.module_el8.5.0+2017+cc873159 x86_64 0:7.4.19-1.module_el8.5.0+2017+cc873159.tuxcare.els2 1:1.10.12-1.module_el8.5.0+2017+cc873159 x86_64 0:5.1.18-1.module_el8.5.0+2017+cc873159 x86_64 0:2.0.1-1.module_el8.5.0+2017+cc873159 x86_64 0:2.9.5-1.module_el8.5.0+2017+cc873159 x86_64 0:1.18.2-1.module_el8.5.0+2017+cc873159 0:5.1.18-1.module_el8.5.0+2009+cc873159 x86_64 0:1.6.1-1.module_el8.5.0+2009+cc873159 x86_64 0:7.4.19-1.module_el8.5.0+2009+cc873159.tuxcare.els1 1:1.10.12-1.module_el8.5.0+2009+cc873159 x86_64 0:5.1.18-1.module_el8.5.0+2009+cc873159 x86_64 0:2.0.1-1.module_el8.5.0+2009+cc873159 x86_64 0:2.9.5-1.module_el8.5.0+2009+cc873159 x86_64 0:1.18.2-1.module_el8.5.0+2009+cc873159 0:5.1.18-1.module_el8.5.0+2055+cc873159 x86_64 0:1.6.1-1.module_el8.5.0+2055+cc873159 x86_64 0:7.4.19-1.module_el8.5.0+2055+cc873159.tuxcare.els3 1:1.10.12-1.module_el8.5.0+2055+cc873159 x86_64 0:5.1.18-1.module_el8.5.0+2055+cc873159 x86_64 0:2.0.1-1.module_el8.5.0+2055+cc873159 x86_64 0:2.9.5-1.module_el8.5.0+2055+cc873159 x86_64 0:1.18.2-1.module_el8.5.0+2055+cc873159 x86_64 0:7.4.19-1.module_el8.5.0+2068+cc873159.tuxcare.els4 x86_64 0:8.2102.0-5.el8.tuxcare.els1 0:8.2102.0-5.el8.tuxcare.els1 x86_64 0:2.30-108.el8.5.1.tuxcare.els1 i686|x86_64 0:2.30-108.el8.5.1.tuxcare.els1 \nstream\s*=\s*rhel\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*rhel\b x86_64 0:1.3.18-21.module_el8.5.0+2049+9e40c7b1 x86_64 1:1.40.2-28.module_el8.5.0+2049+9e40c7b1 1:1.40.2-28.module_el8.5.0+2049+9e40c7b1 x86_64 0:8.2-1.module_el8.5.0+2049+9e40c7b1 x86_64 0:1.18.0-8.module_el8.5.0+2049+9e40c7b1 x86_64 0:1.2.2-1.module_el8.5.0+2049+9e40c7b1 x86_64 0:6.0.0-37.1.module_el8.5.0+2049+9e40c7b1.tuxcare.els1 x86_64 0:1.3.0-2.module_el8.5.0+2049+9e40c7b1 x86_64 0:1.16.2-4.module_el8.5.0+2049+9e40c7b1 0:1.16.2-4.module_el8.5.0+2049+9e40c7b1 x86_64 0:0.2.8-12.module_el8.5.0+2049+9e40c7b1 x86_64 0:6.0.0-1.module_el8.5.0+2049+9e40c7b1 x86_64 15:4.2.0-60.module_el8.5.0+2049+9e40c7b1.2 x86_64 0:1.13.0-2.module_el8.5.0+2049+9e40c7b1 0:1.13.0-2.module_el8.5.0+2049+9e40c7b1 x86_64 1:0.20170427git-3.module_el8.5.0+2049+9e40c7b1 1:0.20170427git-3.module_el8.5.0+2049+9e40c7b1 x86_64 0:5.1.19-10.module_el8.5.0+2049+9e40c7b1 x86_64 1:1.8.0.312.b07-2.el8.5.tuxcare.els1 1:1.8.0.312.b07-2.el8.5.tuxcare.els1 x86_64 1:1.8.0.332.b09-1.el8.tuxcare.els1 1:1.8.0.332.b09-1.el8.tuxcare.els1 i686|x86_64 0:2.4.46-18.el8.tuxcare.els1 x86_64 0:2.4.46-18.el8.tuxcare.els1 i686|x86_64 0:2.4.46-18.el8.tuxcare.els2 x86_64 0:2.4.46-18.el8.tuxcare.els2 x86_64 0:8.0p1-10.el8.tuxcare.els1 x86_64 0:0.10.3-7.10.el8.tuxcare.els1 \nstream\s*=\s*4\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*4\b x86_64 0:1.0.1-2.module_el8.5.0+2035+9782b8ab x86_64 7:4.15-1.module_el8.5.0+2035+9782b8ab.tuxcare.els1 i686|x86_64 0:1.2.11-17.el8.tuxcare.els1 \nstream\s*=\s*1\.14\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*1\.14\b x86_64 1:1.14.1-9.module_el8.5.0+2012+af250afe.tuxcare.els1 1:1.14.1-9.module_el8.5.0+2012+af250afe.tuxcare.els1 x86_64 1:1.14.1-9.module_el8.5.0+2024+af250afe.tuxcare.els2 1:1.14.1-9.module_el8.5.0+2024+af250afe.tuxcare.els2 \nstream\s*=\s*2\.7\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*2\.7\b 0:2.5.1-10.module_el8.5.0+2050+77770ab7 0:1.3.7-31.module_el8.5.0+2050+77770ab7 x86_64 0:2.7.5-7.module_el8.5.0+2050+77770ab7 0:1.3.2-2.module_el8.5.0+2050+77770ab7 x86_64 0:2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1 x86_64 0:0.28.1-7.module_el8.5.0+2050+77770ab7 0:0.8.0-10.module_el8.5.0+2050+77770ab7 0:17.4.0-10.module_el8.5.0+2050+77770ab7 x86_64 0:1.0-16.module_el8.5.0+2050+77770ab7 0:3.5.0.1-12.module_el8.5.0+2050+77770ab7 x86_64 0:3.7.0-1.module_el8.5.0+2050+77770ab7 0:3.0.4-10.module_el8.5.0+2050+77770ab7 x86_64 0:4.5.1-4.module_el8.5.0+2050+77770ab7 0:1.15.0-10.module_el8.5.0+2050+77770ab7 0:2.7.16-2.module_el8.5.0+2050+77770ab7 0:0.14-12.module_el8.5.0+2050+77770ab7 0:1.0.2-13.module_el8.5.0+2050+77770ab7 0:2.5-7.module_el8.5.0+2050+77770ab7 0:1.0.18-6.module_el8.5.0+2050+77770ab7 0:2.10-9.module_el8.5.0+2050+77770ab7 x86_64 0:4.2.3-5.module_el8.5.0+2050+77770ab7 x86_64 0:0.23-19.module_el8.5.0+2050+77770ab7 0:2.0.0-13.module_el8.5.0+2050+77770ab7 x86_64 1:1.14.2-16.module_el8.5.0+2050+77770ab7 1:1.14.2-16.module_el8.5.0+2050+77770ab7 0:9.0.3-18.module_el8.5.0+2050+77770ab7 0:0.6.0-8.module_el8.5.0+2050+77770ab7 0:1.5.3-6.module_el8.5.0+2050+77770ab7 0:2.2.0-22.module_el8.5.0+2050+77770ab7 0:1.6.8-6.module_el8.5.0+2050+77770ab7 0:3.4.2-13.module_el8.5.0+2050+77770ab7 0:1.9.0-4.module_el8.5.0+2050+77770ab7 0:2017.2-12.module_el8.5.0+2050+77770ab7 x86_64 0:3.12-16.module_el8.5.0+2050+77770ab7 0:2.20.0-3.module_el8.5.0+2050+77770ab7 0:3-38.module_el8.5.0+2050+77770ab7 x86_64 0:1.0.0-21.module_el8.5.0+2050+77770ab7 0:39.0.1-13.module_el8.5.0+2050+77770ab7 0:1.15.7-6.module_el8.5.0+2050+77770ab7 0:1.11.0-6.module_el8.5.0+2050+77770ab7 x86_64 0:1.3.2-2.module_el8.5.0+2050+77770ab7 0:1.24.2-3.module_el8.5.0+2050+77770ab7 0:15.1.0-21.module_el8.5.0+2050+77770ab7 1:0.31.1-3.module_el8.5.0+2050+77770ab7 x86_64 0:2.7.18-7.module_el8.5.0+2070+77770ab7.tuxcare.els2 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els1 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els1 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els2 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els2 \nstream\s*=\s*201902\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*201902\b 0:1.2.17-24.module_el8.5.0+2018+25f04681.tuxcare.els1 x86_64 0:2.4.12-1.el8.tuxcare.els1 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{2,}|[3-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els3 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{2,}|[4-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els4 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{2,}|[5-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els5 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{2,}|[2-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els2 \nstream\s*=\s*3\.6\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*3\.6\b i686|x86_64 0:3.6.8-41.el8.tuxcare.els1 x86_64 0:3.6.8-41.el8.tuxcare.els1 i686|x86_64 0:3.6.8-41.el8.tuxcare.els2 x86_64 0:3.6.8-41.el8.tuxcare.els2 i686|x86_64 0:2.1.27-5.el8.tuxcare.els1 x86_64 0:1.9-12.el8.tuxcare.els1 i686|x86_64 1:2.3.8-9.el8.tuxcare.els1 x86_64 1:2.3.8-9.el8.tuxcare.els1 \nstream\s*=\s*1\.10\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*1\.10\b x86_64 0:1.3.9-9.module_el8.5.0+2053+ac338b6d x86_64 0:1.10.2-4.module_el8.5.0+2053+ac338b6d.tuxcare.els1 0:1.10.2-4.module_el8.5.0+2053+ac338b6d.tuxcare.els1 x86_64 0:2.1.1-5.module_el8.5.0+2053+ac338b6d x86_64 0:7.61.1-22.el8.tuxcare.els3 i686|x86_64 0:7.61.1-22.el8.tuxcare.els3 x86_64 7:4.15-1.module_el8.5.0+2073+24c223d9.tuxcare.els2 i686|x86_64 1:2.3.8-9.el8.tuxcare.els2 x86_64 1:2.3.8-9.el8.tuxcare.els2 x86_64 1:1.8.0.342.b07-1.el8.tuxcare.els1 1:1.8.0.342.b07-1.el8.tuxcare.els1 x86_64 1:1.1.1k-5.el8.5.tuxcare.els3 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els3 i686|x86_64 0:2.2.5-4.el8.tuxcare.els1 x86_64 0:2.2.5-4.el8.tuxcare.els1 i686|x86_64 0:1.2.11-17.el8.tuxcare.els2 x86_64 0:3.1.3-12.el8.tuxcare.els2 0:3.1.3-12.el8.tuxcare.els2 x86_64 0:3.1.3-12.el8.tuxcare.els3 0:3.1.3-12.el8.tuxcare.els3 x86_64 0:4.95-1.el8.tuxcare.els1 x86_64 0:3.1.3-12.el8.tuxcare.els4 0:3.1.3-12.el8.tuxcare.els4 x86_64 0:2.2.20-2.el8.tuxcare.els1 x86_64 0:7.61.1-22.el8.tuxcare.els4 i686|x86_64 0:7.61.1-22.el8.tuxcare.els4 i686|x86_64 0:3.6.8-41.el8.tuxcare.els3 x86_64 0:3.6.8-41.el8.tuxcare.els3 i686|x86_64 0:239-51.el8_5.2.tuxcare.els1 x86_64 0:239-51.el8_5.2.tuxcare.els1 i686|x86_64 0:2.2.5-4.el8.tuxcare.els2 x86_64 0:2.2.5-4.el8.tuxcare.els2 x86_64 32:9.11.26-6.el8.tuxcare.els3 i686|x86_64 32:9.11.26-6.el8.tuxcare.els3 32:9.11.26-6.el8.tuxcare.els3 x86_64 0:3.26.0-15.el8.tuxcare.els1 i686|x86_64 0:3.26.0-15.el8.tuxcare.els1 0:3.26.0-15.el8.tuxcare.els1 x86_64 0:3.26.0-15.el8.tuxcare.els2 i686|x86_64 0:3.26.0-15.el8.tuxcare.els2 0:3.26.0-15.el8.tuxcare.els2 x86_64 7:4.15-1.module_el8.5.0+2079+24c223d9.tuxcare.els3 i686|x86_64 0:2.2.5-4.el8.tuxcare.els3 x86_64 0:2.2.5-4.el8.tuxcare.els3 x86_64 1:1.8.0.352.b08-1.el8.tuxcare.els1 1:1.8.0.352.b08-1.el8.tuxcare.els1 x86_64 0:3.26.0-15.el8.tuxcare.els3 i686|x86_64 0:3.26.0-15.el8.tuxcare.els3 0:3.26.0-15.el8.tuxcare.els3 x86_64 0:3.26.0-15.el8.tuxcare.els4 i686|x86_64 0:3.26.0-15.el8.tuxcare.els4 0:3.26.0-15.el8.tuxcare.els4 x86_64 4:5.26.3-420.el8.tuxcare.els1 0:0.99-420.el8.tuxcare.els1 x86_64 0:1.26-420.el8.tuxcare.els1 0:1.06-420.el8.tuxcare.els1 x86_64 0:1.28-420.el8.tuxcare.els1 0:1.34-420.el8.tuxcare.els1 x86_64 0:1.38-420.el8.tuxcare.els1 1:1.10-420.el8.tuxcare.els1 1:0.21-420.el8.tuxcare.els1 0:1.59-420.el8.tuxcare.els1 0:1.03-420.el8.tuxcare.els1 1:0.08-420.el8.tuxcare.els1 0:2.55-420.el8.tuxcare.els1 0:1.22.02-420.el8.tuxcare.els1 0:1.23-420.el8.tuxcare.els1 0:1.30-420.el8.tuxcare.els1 x86_64 0:1.31-420.el8.tuxcare.els1 i686|x86_64 4:5.26.3-420.el8.tuxcare.els1 4:5.26.3-420.el8.tuxcare.els1 0:1.11-420.el8.tuxcare.els1 0:5.26.3-420.el8.tuxcare.els1 x86_64 0:7.4.19-1.module_el8.5.0+2081+cc873159.tuxcare.els5 x86_64 0:5.2.4-3.el8.tuxcare.els1 i686|x86_64 0:5.2.4-3.el8.tuxcare.els1 x86_64 0:4.14.5-7.el8.5.tuxcare.els3 i686|x86_64 0:4.14.5-7.el8.5.tuxcare.els3 0:4.14.5-7.el8.5.tuxcare.els3 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els3 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els3 x86_64 0:2.4.37-43.module_el8.5.0+2083+6f259f31.tuxcare.els8 0:2.4.37-43.module_el8.5.0+2083+6f259f31.tuxcare.els8 x86_64 1:2.4.37-43.module_el8.5.0+2083+6f259f31.tuxcare.els8 x86_64 1:1.14.1-9.module_el8.5.0+2086+af250afe.tuxcare.els3 1:1.14.1-9.module_el8.5.0+2086+af250afe.tuxcare.els3 i686|x86_64 0:6.0.0-37.1.module_el8.5.0+2093+9e40c7b1.tuxcare.els2 x86_64 0:6.0.0-37.1.module_el8.5.0+2093+9e40c7b1.tuxcare.els2 i686|x86_64 0:3.6.8-41.module_el8.5.0+2088+5c5719bc.tuxcare.els4 x86_64 0:3.6.8-41.module_el8.5.0+2088+5c5719bc.tuxcare.els4 x86_64 0:2.7.18-7.module_el8.5.0+2087+77770ab7.tuxcare.els3 x86_64 0:331-1.el8_3.2.tuxcare.els1 \nstream\s*=\s*8\.0\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*8\.0\b x86_64 0:8.0.30-1.module_el8.5.0+2092+b8928c02.tuxcare.els1 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els4 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els4 i686|x86_64 0:1.18.2-14.el8.tuxcare.els1 x86_64 0:7.61.1-22.el8.tuxcare.els5 i686|x86_64 0:7.61.1-22.el8.tuxcare.els5 x86_64 0:4.14.3-19.el8_5.tuxcare.els2 0:4.14.3-19.el8_5.tuxcare.els2 i686|x86_64 0:4.14.3-19.el8_5.tuxcare.els2 i686|x86_64 0:239-51.el8_5.2.tuxcare.els2 x86_64 0:239-51.el8_5.2.tuxcare.els2 x86_64 0:2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9 0:2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9 x86_64 1:2.4.37-43.module_el8.5.0+2097+6f259f31.tuxcare.els9 x86_64 0:1.8.29-7.el8_4.1.tuxcare.els1 i686|x86_64 0:1.8.29-7.el8_4.1.tuxcare.els1 x86_64 1:1.8.0.362.b09-1.el8.tuxcare.els1 1:1.8.0.362.b09-1.el8.tuxcare.els1 x86_64 1:1.1.1k-5.el8.5.tuxcare.els4 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els4 x86_64 0:2.27.0-1.el8.tuxcare.els1 0:2.27.0-1.el8.tuxcare.els1 i686|x86_64 0:3.67.0-7.el8_5.tuxcare.els2 x86_64 0:3.67.0-7.el8_5.tuxcare.els2 x86_64 2:1.30-5.el8.tuxcare.els1 x86_64 0:2.4.37-43.module_el8.5.0+2108+6f259f31.tuxcare.els10 0:2.4.37-43.module_el8.5.0+2108+6f259f31.tuxcare.els10 x86_64 1:2.4.37-43.module_el8.5.0+2108+6f259f31.tuxcare.els10 x86_64 0:2.7.18-7.module_el8.5.0+2102+77770ab7.tuxcare.els4 i686|x86_64 0:239-51.el8_5.2.tuxcare.els3 x86_64 0:239-51.el8_5.2.tuxcare.els3 i686|x86_64 0:3.6.8-42.el8.tuxcare.els1 x86_64 0:3.6.8-42.el8.tuxcare.els1 x86_64 0:4.14.5-7.el8.5.tuxcare.els4 i686|x86_64 0:4.14.5-7.el8.5.tuxcare.els4 0:4.14.5-7.el8.5.tuxcare.els4 x86_64 0:2.4.37-43.module_el8.5.0+2114+6f259f31.tuxcare.els11 0:2.4.37-43.module_el8.5.0+2114+6f259f31.tuxcare.els11 x86_64 1:2.4.37-43.module_el8.5.0+2114+6f259f31.tuxcare.els11 x86_64 0:7.61.1-22.el8.tuxcare.els6 i686|x86_64 0:7.61.1-22.el8.tuxcare.els6 x86_64 0:7.4.19-1.module_el8.5.0+2115+85f551af.tuxcare.els6 i686|x86_64 0:239-51.el8_5.2.tuxcare.els4 x86_64 0:239-51.el8_5.2.tuxcare.els4 x86_64 1:1.1.1k-5.el8.5.tuxcare.els5 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els5 x86_64 0:7.61.1-22.el8.tuxcare.els7 i686|x86_64 0:7.61.1-22.el8.tuxcare.els7 i686|x86_64 0:3.67.0-7.el8_5.tuxcare.els3 x86_64 0:3.67.0-7.el8_5.tuxcare.els3 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{2,}|[6-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els6 1:2.02-106.el8.tuxcare.els2 x86_64 1:2.02-106.el8.tuxcare.els2 1:2.02-106.el8.tuxcare.els3 x86_64 1:2.02-106.el8.tuxcare.els3 x86_64 0:7.61.1-22.el8.tuxcare.els8 i686|x86_64 0:7.61.1-22.el8.tuxcare.els8 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{2,}|[7-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els7 x86_64 1:1.1.1k-5.el8.5.tuxcare.els6 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els6 x86_64 0:2.27.0-1.el8.tuxcare.els2 0:2.27.0-1.el8.tuxcare.els2 i686|x86_64 0:0.9.4-3.el8.tuxcare.els1 0:0.9.4-3.el8.tuxcare.els1 x86_64 0:11.7.3-6.el8.tuxcare.els1 x86_64 0:7.61.1-22.el8.tuxcare.els9 i686|x86_64 0:7.61.1-22.el8.tuxcare.els9 x86_64 0:11.7.3-6.el8.tuxcare.els2 i686|x86_64 0:3.6.16-4.el8.tuxcare.els1 x86_64 0:3.6.16-4.el8.tuxcare.els1 x86_64 12:4.3.6-45.el8.tuxcare.els1 12:4.3.6-45.el8.tuxcare.els1 i686|x86_64 12:4.3.6-45.el8.tuxcare.els1 x86_64 0:2.27.0-1.el8.tuxcare.els3 0:2.27.0-1.el8.tuxcare.els3 x86_64 0:4.14.5-7.el8.5.tuxcare.els5 i686|x86_64 0:4.14.5-7.el8.5.tuxcare.els5 0:4.14.5-7.el8.5.tuxcare.els5 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{2,}|[8-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els8 x86_64 4:5.26.3-420.el8.tuxcare.els2 0:0.99-420.el8.tuxcare.els2 x86_64 0:1.26-420.el8.tuxcare.els2 0:1.06-420.el8.tuxcare.els2 x86_64 0:1.28-420.el8.tuxcare.els2 0:1.34-420.el8.tuxcare.els2 x86_64 0:1.38-420.el8.tuxcare.els2 1:1.10-420.el8.tuxcare.els2 1:0.21-420.el8.tuxcare.els2 0:1.59-420.el8.tuxcare.els2 0:1.03-420.el8.tuxcare.els2 1:0.08-420.el8.tuxcare.els2 0:2.55-420.el8.tuxcare.els2 0:1.22.02-420.el8.tuxcare.els2 0:1.23-420.el8.tuxcare.els2 0:1.30-420.el8.tuxcare.els2 x86_64 0:1.31-420.el8.tuxcare.els2 i686|x86_64 4:5.26.3-420.el8.tuxcare.els2 4:5.26.3-420.el8.tuxcare.els2 0:1.11-420.el8.tuxcare.els2 0:5.26.3-420.el8.tuxcare.els2 x86_64 0:7.4.19-1.module_el8.5.0+2117+e34035a0.tuxcare.els7 x86_64 1:1.1.1k-5.el8.5.tuxcare.els7 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els7 x86_64 0:7.61.1-22.el8.tuxcare.els10 i686|x86_64 0:7.61.1-22.el8.tuxcare.els10 x86_64 0:8.0.32-1.module_el8.5.0+2120+e7c74a31.tuxcare.els1 x86_64 0:3.26.0-15.el8.tuxcare.els5 i686|x86_64 0:3.26.0-15.el8.tuxcare.els5 0:3.26.0-15.el8.tuxcare.els5 x86_64 0:2.27.0-1.el8.tuxcare.els4 0:2.27.0-1.el8.tuxcare.els4 x86_64 1:1.8.0.372.b07-1.el8.tuxcare.els1 1:1.8.0.372.b07-1.el8.tuxcare.els1 x86_64 0:8.0.33-1.module_el8.5.0+2122+5f65278f.tuxcare.els1 x86_64 32:9.11.26-6.el8.tuxcare.els4 i686|x86_64 32:9.11.26-6.el8.tuxcare.els4 32:9.11.26-6.el8.tuxcare.els4 x86_64 1:2.2.6-40.el8.tuxcare.els2 i686|x86_64 1:2.2.6-40.el8.tuxcare.els2 1:2.2.6-40.el8.tuxcare.els2 i686|x86_64 0:2.4.46-18.el8.tuxcare.els3 x86_64 0:2.4.46-18.el8.tuxcare.els3 x86_64 4:5.26.3-420.el8.tuxcare.els3 0:0.99-420.el8.tuxcare.els3 x86_64 0:1.26-420.el8.tuxcare.els3 0:1.06-420.el8.tuxcare.els3 x86_64 0:1.28-420.el8.tuxcare.els3 0:1.34-420.el8.tuxcare.els3 x86_64 0:1.38-420.el8.tuxcare.els3 1:1.10-420.el8.tuxcare.els3 1:0.21-420.el8.tuxcare.els3 0:1.59-420.el8.tuxcare.els3 0:1.03-420.el8.tuxcare.els3 1:0.08-420.el8.tuxcare.els3 0:2.55-420.el8.tuxcare.els3 0:1.22.02-420.el8.tuxcare.els3 0:1.23-420.el8.tuxcare.els3 0:1.30-420.el8.tuxcare.els3 x86_64 0:1.31-420.el8.tuxcare.els3 i686|x86_64 4:5.26.3-420.el8.tuxcare.els3 4:5.26.3-420.el8.tuxcare.els3 0:1.11-420.el8.tuxcare.els3 0:5.26.3-420.el8.tuxcare.els3 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{2,}|9).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els9 x86_64 1:1.8.0.382.b05-1.el8.tuxcare.els1 1:1.8.0.382.b05-1.el8.tuxcare.els1 i686|x86_64 0:0.9.4-3.el8.tuxcare.els2 0:0.9.4-3.el8.tuxcare.els2 x86_64 0:8.0p1-10.el8.tuxcare.els2 x86_64 0:0.10.3-7.10.el8.tuxcare.els2 x86_64 0:4.14.5-7.el8.5.tuxcare.els6 i686|x86_64 0:4.14.5-7.el8.5.tuxcare.els6 0:4.14.5-7.el8.5.tuxcare.els6 0:39.31.5.1-103.el8.1 1:39.31.5.1-103.el8.1 0:18.168.6.1-103.el8.1 1:25.30.13.0-103.el8.1 0:15.32.2.9-103.el8.1 0:228.61.2.24-103.el8.1 0:8.83.5.1_1-103.el8.1 0:8.24.2.2-103.el8.1 0:9.221.4.1-103.el8.1 0:41.28.5.1-103.el8.1 0:20210702-103.gitd79c2677.el8.tuxcare.els1 2:20210702-103.gitd79c2677.el8.tuxcare.els1 x86_64 0:3.5.1-13.el8.tuxcare.els1 i686|x86_64 0:3.6.16-4.el8.tuxcare.els2 x86_64 0:3.6.16-4.el8.tuxcare.els2 x86_64 0:7.4.19-1.module_el8.5.0+2125+497b70f8.tuxcare.els8 x86_64 1:1.1.1k-5.el8.5.tuxcare.els8 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els8 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{2,}).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els10 i686|x86_64 0:3.6.8-42.el8.tuxcare.els3 x86_64 0:3.6.8-42.el8.tuxcare.els3 x86_64 0:2.30-108.el8_5.1.tuxcare.els3 i686|x86_64 0:2.30-108.el8_5.1.tuxcare.els3 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[2-9][0-9]|1[1-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els11 x86_64 0:2.30-108.el8_5.1.tuxcare.els4 i686|x86_64 0:2.30-108.el8_5.1.tuxcare.els4 x86_64 0:2.7.18-7.module_el8.5.0+2129+a98289c5.tuxcare.els6 i686|x86_64 0:1.0.0-5.el8.tuxcare.els2 x86_64 0:1.0.0-5.el8.tuxcare.els2 x86_64 32:9.11.26-6.el8.tuxcare.els5 i686|x86_64 32:9.11.26-6.el8.tuxcare.els5 32:9.11.26-6.el8.tuxcare.els5 x86_64 0:7.61.1-22.el8.tuxcare.els11 i686|x86_64 0:7.61.1-22.el8.tuxcare.els11 x86_64 0:2.7.18-7.module_el8.5.0+2130+8fbfb05a.tuxcare.els7 x86_64 0:4.96.1-1.el8.tuxcare.els1 i686|x86_64 0:2.56.4-156.el8.tuxcare.els1 0:2.56.4-156.el8.tuxcare.els1 x86_64 0:2.56.4-156.el8.tuxcare.els1 x86_64 0:2.7.18-7.module_el8.5.0+2134+fd087017.tuxcare.els8 i686|x86_64 0:3.6.8-42.el8.tuxcare.els4 x86_64 0:3.6.8-42.el8.tuxcare.els4 i686|x86_64 0:1.2.11-17.el8.tuxcare.els3 x86_64 0:2.28-164.el8.tuxcare.els3 i686|x86_64 0:2.28-164.el8.tuxcare.els3 x86_64 1:1.14.1-9.module_el8.5.0+2138+8e7fbb42.tuxcare.els4 1:1.14.1-9.module_el8.5.0+2138+8e7fbb42.tuxcare.els4 x86_64 0:2.4.37-43.module_el8.5.0+2140+6f259f31.tuxcare.els12 0:2.4.37-43.module_el8.5.0+2140+6f259f31.tuxcare.els12 x86_64 1:2.4.37-43.module_el8.5.0+2140+6f259f31.tuxcare.els12 x86_64 1:1.1.1k-5.el8.5.tuxcare.els9 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els9 x86_64 7:4.15-1.module_el8.5.0+2143+24c223d9.tuxcare.els4 x86_64 7:4.15-1.module_el8.5.0+2151+24c223d9.tuxcare.els5 x86_64 0:4.14.5-7.el8.5.tuxcare.els7 i686|x86_64 0:4.14.5-7.el8.5.tuxcare.els7 0:4.14.5-7.el8.5.tuxcare.els7 i686|x86_64 0:1.3.5-7.el8.tuxcare.els1 x86_64 0:2.7.18-7.module_el8.5.0+2157+bd2fe71c.tuxcare.els9 x86_64 4:20231114-1.el8.tuxcare.els1 x86_64 7:4.15-1.module_el8.5.0+2160+24c223d9.tuxcare.els6 x86_64 0:1.8.27-2.el8.tuxcare.els1 x86_64 7:4.15-1.module_el8.5.0+2162+1bcae461.tuxcare.els7 x86_64 0:8.0p1-10.el8.tuxcare.els3 x86_64 0:0.10.3-7.10.el8.tuxcare.els3 x86_64 1:1.8.0.402.b06-1.el8.tuxcare.els1 1:1.8.0.402.b06-1.el8.tuxcare.els1 x86_64 7:4.15-1.module_el8.5.0+2164+24c223d9.tuxcare.els8 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[2-9][0-9]|1[4-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els14 x86_64 0:3.26.0-15.el8.tuxcare.els6 i686|x86_64 0:3.26.0-15.el8.tuxcare.els6 0:3.26.0-15.el8.tuxcare.els6 i686|x86_64 0:3.6.16-4.el8.tuxcare.els3 x86_64 0:3.6.16-4.el8.tuxcare.els3 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els5 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els5 x86_64 0:1.8.29-7.el8_4.1.tuxcare.els2 i686|x86_64 0:1.8.29-7.el8_4.1.tuxcare.els2 x86_64 32:9.11.26-6.el8.tuxcare.els6 i686|x86_64 32:9.11.26-6.el8.tuxcare.els6 32:9.11.26-6.el8.tuxcare.els6 i686|x86_64 0:0.9.4-3.el8.tuxcare.els3 0:0.9.4-3.el8.tuxcare.els3 x86_64 7:4.15-1.module_el8.5.0+2168+2bf62d96.tuxcare.els9 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[2-9][0-9]|1[5-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els15 x86_64 0:15.8-1.el8.tuxcare.els1 x86_64 7:4.15-1.module_el8.5.0+2170+844797b0.tuxcare.els10 i686|x86_64 0:2.3.7-1.el8.tuxcare.els1 x86_64 0:7.61.1-22.el8.tuxcare.els12 i686|x86_64 0:7.61.1-22.el8.tuxcare.els12 i686|x86_64 0:2.2.5-4.el8.tuxcare.els4 x86_64 0:2.2.5-4.el8.tuxcare.els4 x86_64 0:530-1.el8.tuxcare.els1 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[2-9][0-9]|1[6-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els16 x86_64 0:530-1.el8.tuxcare.els2 x86_64 0:7.4.19-1.module_el8.5.0+2173+6405361e.tuxcare.els9 x86_64 0:7.61.1-22.el8.tuxcare.els13 i686|x86_64 0:7.61.1-22.el8.tuxcare.els13 x86_64 0:2.4.37-43.module_el8.5.0+2179+6f259f31.tuxcare.els13 0:2.4.37-43.module_el8.5.0+2179+6f259f31.tuxcare.els13 x86_64 1:2.4.37-43.module_el8.5.0+2179+6f259f31.tuxcare.els13 x86_64 32:9.11.26-6.el8.tuxcare.els7 i686|x86_64 32:9.11.26-6.el8.tuxcare.els7 32:9.11.26-6.el8.tuxcare.els7 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els6 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els6 x86_64 0:2.7.18-7.module_el8.5.0+2182+6e63cb5b.tuxcare.els10 i686|x86_64 0:3.6.8-42.el8.tuxcare.els5 x86_64 0:3.6.8-42.el8.tuxcare.els5 x86_64 0:2.28-164.el8.tuxcare.els4 i686|x86_64 0:2.28-164.el8.tuxcare.els4 i686|x86_64 0:0.9.4-3.el8.tuxcare.els4 0:0.9.4-3.el8.tuxcare.els4 i686|x86_64 0:1.18.2-14.el8.tuxcare.els2 x86_64 1:1.1.1k-5.el8.5.tuxcare.els10 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els10 x86_64 32:9.11.26-6.el8.tuxcare.els8 i686|x86_64 32:9.11.26-6.el8.tuxcare.els8 32:9.11.26-6.el8.tuxcare.els8 x86_64 0:2.28-164.el8.tuxcare.els5 i686|x86_64 0:2.28-164.el8.tuxcare.els5 x86_64 1:1.8.0.412.b08-1.el8.tuxcare.els1 1:1.8.0.412.b08-1.el8.tuxcare.els1 x86_64 0:8.0p1-10.el8.tuxcare.els4 x86_64 0:0.10.3-7.10.el8.tuxcare.els4 i686|x86_64 0:1.3.1-15.el8.tuxcare.els1 i686|x86_64 0:3.3.15-6.el8.tuxcare.els1 0:3.3.15-6.el8.tuxcare.els1 i686|x86_64 0:239-51.el8_5.2.tuxcare.els5 x86_64 0:239-51.el8_5.2.tuxcare.els5 x86_64 1:1.4.0-28.el8.tuxcare.els1 0:39.31.5.1-103.gitd79c2677.el8.tuxcare.els3 1:39.31.5.1-103.gitd79c2677.el8.tuxcare.els3 0:18.168.6.1-103.gitd79c2677.el8.tuxcare.els3 1:25.30.13.0-103.gitd79c2677.el8.tuxcare.els3 0:15.32.2.9-103.gitd79c2677.el8.tuxcare.els3 0:228.61.2.24-103.gitd79c2677.el8.tuxcare.els3 0:8.83.5.1_1-103.gitd79c2677.el8.tuxcare.els3 0:8.24.2.2-103.gitd79c2677.el8.tuxcare.els3 0:9.221.4.1-103.gitd79c2677.el8.tuxcare.els3 0:41.28.5.1-103.gitd79c2677.el8.tuxcare.els3 0:20210702-103.gitd79c2677.el8.tuxcare.els3 2:20210702-103.gitd79c2677.el8.tuxcare.els3 x86_64 1:2.2.6-40.el8.tuxcare.els3 i686|x86_64 1:2.2.6-40.el8.tuxcare.els3 1:2.2.6-40.el8.tuxcare.els3 x86_64 0:8.0.36-1.module_el8.5.0+2186+b56a0d9e.tuxcare.els1 0:39.31.5.1-103.gitd79c2677.el8.tuxcare.els4 1:39.31.5.1-103.gitd79c2677.el8.tuxcare.els4 0:18.168.6.1-103.gitd79c2677.el8.tuxcare.els4 1:25.30.13.0-103.gitd79c2677.el8.tuxcare.els4 0:15.32.2.9-103.gitd79c2677.el8.tuxcare.els4 0:228.61.2.24-103.gitd79c2677.el8.tuxcare.els4 0:8.83.5.1_1-103.gitd79c2677.el8.tuxcare.els4 0:8.24.2.2-103.gitd79c2677.el8.tuxcare.els4 0:9.221.4.1-103.gitd79c2677.el8.tuxcare.els4 0:41.28.5.1-103.gitd79c2677.el8.tuxcare.els4 0:20210702-103.gitd79c2677.el8.tuxcare.els4 2:20210702-103.gitd79c2677.el8.tuxcare.els4 x86_64 0:2.28-164.el8.tuxcare.els6 i686|x86_64 0:2.28-164.el8.tuxcare.els6 x86_64 0:1.8.29-7.el8_4.1.tuxcare.els3 i686|x86_64 0:1.8.29-7.el8_4.1.tuxcare.els3 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[2-9][0-9]|1[7-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els17 i686|x86_64 0:3.6.8-42.el8.tuxcare.els6 x86_64 0:3.6.8-42.el8.tuxcare.els6 x86_64 0:2.7.18-7.module_el8.5.0+2188+78522bf0.tuxcare.els11 x86_64 0:4.14.3-19.el8_5.tuxcare.els4 0:4.14.3-19.el8_5.tuxcare.els4 i686|x86_64 0:4.14.3-19.el8_5.tuxcare.els4 x86_64 0:7.4.19-1.module_el8.5.0+2189+bee1c688.tuxcare.els10 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[2-9][0-9]|1[8-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els18 x86_64 0:4.14.5-7.el8.5.tuxcare.els8 i686|x86_64 0:4.14.5-7.el8.5.tuxcare.els8 0:4.14.5-7.el8.5.tuxcare.els8 x86_64 0:2.28-164.el8.tuxcare.els7 i686|x86_64 0:2.28-164.el8.tuxcare.els7 x86_64 0:1.19.5-11.el8.tuxcare.els1 x86_64 1:1.8.0.422.b05-1.el8.tuxcare.els1 1:1.8.0.422.b05-1.el8.tuxcare.els1 x86_64 0:2.4.37-43.module_el8.5.0+2210+0ce89f10.tuxcare.els14 0:2.4.37-43.module_el8.5.0+2210+0ce89f10.tuxcare.els14 x86_64 1:2.4.37-43.module_el8.5.0+2210+0ce89f10.tuxcare.els14 1:2.02-106.el8.tuxcare.els6 x86_64 1:2.02-106.el8.tuxcare.els6 x86_64 0:2.27.0-1.el8.tuxcare.els5 0:2.27.0-1.el8.tuxcare.els5 x86_64 32:9.11.26-6.el8.tuxcare.els9 i686|x86_64 32:9.11.26-6.el8.tuxcare.els9 32:9.11.26-6.el8.tuxcare.els9 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[2-9][0-9]|19).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els19 i686|x86_64 0:3.6.8-42.el8.tuxcare.els7 x86_64 0:3.6.8-42.el8.tuxcare.els7 i686|x86_64 0:2.2.5-13.el8.tuxcare.els1 x86_64 0:2.2.5-13.el8.tuxcare.els1 i686|x86_64 0:1.18.2-14.el8.tuxcare.els3 x86_64 32:9.11.26-6.el8.tuxcare.els10 i686|x86_64 32:9.11.26-6.el8.tuxcare.els10 32:9.11.26-6.el8.tuxcare.els10 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[3-9][0-9]|2[0-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els20 i686|x86_64 0:3.6.16-4.el8.tuxcare.els4 x86_64 0:3.6.16-4.el8.tuxcare.els4 x86_64 0:2.7.18-7.module_el8.5.0+2219+84422d60.tuxcare.els14 i686|x86_64 0:3.6.8-42.el8.tuxcare.els8 x86_64 0:3.6.8-42.el8.tuxcare.els8 i686|x86_64 0:3.6.8-42.el8.tuxcare.els9 x86_64 0:3.6.8-42.el8.tuxcare.els9 x86_64 0:7.4.19-1.module_el8.5.0+2222+2a64edd4.tuxcare.els11 0:39.31.5.1-103.gitd79c2677.el8.tuxcare.els5 1:39.31.5.1-103.gitd79c2677.el8.tuxcare.els5 0:18.168.6.1-103.gitd79c2677.el8.tuxcare.els5 1:25.30.13.0-103.gitd79c2677.el8.tuxcare.els5 0:15.32.2.9-103.gitd79c2677.el8.tuxcare.els5 0:228.61.2.24-103.gitd79c2677.el8.tuxcare.els5 0:8.83.5.1_1-103.gitd79c2677.el8.tuxcare.els5 0:8.24.2.2-103.gitd79c2677.el8.tuxcare.els5 0:9.221.4.1-103.gitd79c2677.el8.tuxcare.els5 0:41.28.5.1-103.gitd79c2677.el8.tuxcare.els5 0:20210702-103.gitd79c2677.el8.tuxcare.els5 2:20210702-103.gitd79c2677.el8.tuxcare.els5 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[3-9][0-9]|2[1-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els21 x86_64 0:7.4.19-1.module_el8.5.0+2227+29619836.tuxcare.els11 x86_64 7:4.15-1.module_el8.5.0+2228+98c2f670.tuxcare.els11 x86_64 1:1.1.1k-5.el8.5.tuxcare.els11 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els11 x86_64 1:1.8.0.432.b06-1.el8.tuxcare.els1 1:1.8.0.432.b06-1.el8.tuxcare.els1 x86_64 0:1.0.6-26.el8.tuxcare.els1 i686|x86_64 0:1.0.6-26.el8.tuxcare.els1 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[3-9][0-9]|2[2-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els22 i686|x86_64 0:2.2.5-13.el8.tuxcare.els2 x86_64 0:2.2.5-13.el8.tuxcare.els2 x86_64 0:2.30-108.el8_5.1.tuxcare.els5 i686|x86_64 0:2.30-108.el8_5.1.tuxcare.els5 x86_64 7:4.15-1.module_el8.5.0+2235+a01b9b37.tuxcare.els12 x86_64 7:4.15-1.module_el8.5.0+2238+84d1ef7b.tuxcare.els13 x86_64 0:7.4.19-1.module_el8.5.0+2239+85f1b6cb.tuxcare.els13 x86_64 0:7.4.19-1.module_el8.5.0+2242+b48df4dd.tuxcare.els14 i686|x86_64 0:3.6.8-42.el8.tuxcare.els10 x86_64 0:3.6.8-42.el8.tuxcare.els10 x86_64 0:7.4.19-1.module_el8.5.0+2251+c0eb9ded.tuxcare.els15 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[3-9][0-9]|2[3-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els23 x86_64 0:3.1.3-12.el8.tuxcare.els5 0:3.1.3-12.el8.tuxcare.els5 x86_64 0:3.1.3-12.el8.tuxcare.els6 0:3.1.3-12.el8.tuxcare.els6 i686|x86_64 0:1.3.18-21.module_el8.5.0+2257+164246a8.tuxcare.els1 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[3-9][0-9]|2[4-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els24 x86_64 0:7.4.19-1.module_el8.5.0+2258+716c7471.tuxcare.els16 x86_64 0:3.1.3-12.el8.tuxcare.els7 0:3.1.3-12.el8.tuxcare.els7 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[3-9][0-9]|2[5-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els25 0:39.31.5.1-103.gitd79c2677.el8.tuxcare.els6 1:39.31.5.1-103.gitd79c2677.el8.tuxcare.els6 0:18.168.6.1-103.gitd79c2677.el8.tuxcare.els6 1:25.30.13.0-103.gitd79c2677.el8.tuxcare.els6 0:15.32.2.9-103.gitd79c2677.el8.tuxcare.els6 0:228.61.2.24-103.gitd79c2677.el8.tuxcare.els6 0:8.83.5.1_1-103.gitd79c2677.el8.tuxcare.els6 0:8.24.2.2-103.gitd79c2677.el8.tuxcare.els6 0:9.221.4.1-103.gitd79c2677.el8.tuxcare.els6 0:41.28.5.1-103.gitd79c2677.el8.tuxcare.els6 0:20210702-103.gitd79c2677.el8.tuxcare.els6 2:20210702-103.gitd79c2677.el8.tuxcare.els6 i686|x86_64 0:1.18.2-14.el8.tuxcare.els4 i686|x86_64 0:3.6.8-42.el8.tuxcare.els11 x86_64 0:3.6.8-42.el8.tuxcare.els11 x86_64 32:9.11.26-6.el8.tuxcare.els11 i686|x86_64 32:9.11.26-6.el8.tuxcare.els11 32:9.11.26-6.el8.tuxcare.els11 x86_64 0:8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1 i686|x86_64 0:6.0.0-37.1.module_el8.5.0+2270+9e40c7b1.tuxcare.els3 x86_64 0:6.0.0-37.1.module_el8.5.0+2270+9e40c7b1.tuxcare.els3 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els7 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els7 i686|x86_64 0:3.6.8-42.el8.tuxcare.els12 x86_64 0:3.6.8-42.el8.tuxcare.els12 x86_64 1:2.2.6-40.el8.tuxcare.els4 i686|x86_64 1:2.2.6-40.el8.tuxcare.els4 1:2.2.6-40.el8.tuxcare.els4 x86_64 0:2.30-108.el8_5.1.tuxcare.els6 i686|x86_64 0:2.30-108.el8_5.1.tuxcare.els6 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els8 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els8 x86_64 0:8.0p1-10.el8.tuxcare.els5 x86_64 0:0.10.3-7.10.el8.tuxcare.els5 (^4\.18\.0\-348\.7\.1\.el8_5\.tuxcare\.els(\d{3,}|[3-9][0-9]|2[6-9]).(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els26 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els9 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els9 i686|x86_64 0:1.18.2-14.el8.tuxcare.els5 x86_64 1:1.1.1k-5.el8.5.tuxcare.els12 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els12 1:2.02-106.el8.tuxcare.els9 x86_64 1:2.02-106.el8.tuxcare.els9 x86_64 0:7.4.19-1.module_el8.5.0+2281+17195e03.tuxcare.els17 x86_64 0:7.4.19-1.module_el8.5.0+2286+946aa90d.tuxcare.els19 x86_64 0:7.4.19-1.module_el8.5.0+2288+dc6923aa.tuxcare.els20 x86_64 0:7.4.19-1.module_el8.5.0+2289+56b9c600.tuxcare.els21 x86_64 0:8.5.0-4.el8_5.tuxcare.els1 i686|x86_64 0:8.5.0-4.el8_5.tuxcare.els1 x86_64 0:7.4.19-1.module_el8.5.0+2290+46d5ac1b.tuxcare.els22 x86_64 1:1.8.0.452.b09-1.el8.tuxcare.els1 1:1.8.0.452.b09-1.el8.tuxcare.els1 i686|x86_64 0:2.2.5-13.el8.tuxcare.els3 x86_64 0:2.2.5-13.el8.tuxcare.els3 i686|x86_64 0:4.13-3.el8.tuxcare.els2 x86_64 0:4.13-3.el8.tuxcare.els2 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els10 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els10 (^4\.18\.0\-348\.(\d{2,}|[7-9])(?:\.(\d{2,}|[1-9]))?\.el8_5\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[7-9]))?\.(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els27 i686|x86_64 0:3.6.16-4.el8.tuxcare.els5 x86_64 0:3.6.16-4.el8.tuxcare.els5 x86_64 0:8.0.42-1.module_el8.5.0+2296+b0ca1b0e.tuxcare.els1 x86_64 0:8.0p1-10.el8.tuxcare.els6 x86_64 0:0.10.3-7.10.el8.tuxcare.els6 (^4\.18\.0\-348\.(\d{2,}|[7-9])(?:\.(\d{2,}|[1-9]))?\.el8_5\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[8-9]))?\.(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els28 x86_64 0:7.4.19-1.module_el8.5.0+2300+a5fd69b9.tuxcare.els23 x86_64 0:3.1.3-12.el8.tuxcare.els8 0:3.1.3-12.el8.tuxcare.els8 x86_64 0:2.27.0-1.el8.tuxcare.els6 0:2.27.0-1.el8.tuxcare.els6 x86_64 0:2.28-164.el8.tuxcare.els8 i686|x86_64 0:2.28-164.el8.tuxcare.els8 x86_64 0:7.61.1-22.el8.tuxcare.els14 i686|x86_64 0:7.61.1-22.el8.tuxcare.els14 i686|x86_64 0:0.99.9-1.el8.tuxcare.els1 x86_64 0:0.99.9-1.el8.tuxcare.els1 x86_64 1:1.1.1k-5.el8.5.tuxcare.els13 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els13 i686|x86_64 0:1.18.2-14.el8.tuxcare.els6 x86_64 0:1.8.29-7.el8_4.1.tuxcare.els4 i686|x86_64 0:1.8.29-7.el8_4.1.tuxcare.els4 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els11 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els11 x86_64 0:2.27.0-1.el8.tuxcare.els7 0:2.27.0-1.el8.tuxcare.els7 i686|x86_64 0:1.3.1-15.el8.tuxcare.els2 i686|x86_64 0:2.56.4-156.el8.tuxcare.els2 0:2.56.4-156.el8.tuxcare.els2 x86_64 0:2.56.4-156.el8.tuxcare.els2 i686|x86_64 0:3.6.8-42.el8.tuxcare.els13 x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els29 x86_64 1:1.8.0.462.b08-1.el8.tuxcare.els1 1:1.8.0.462.b08-1.el8.tuxcare.els1 i686|x86_64 0:2.56.4-156.el8.tuxcare.els3 0:2.56.4-156.el8.tuxcare.els3 x86_64 0:2.56.4-156.el8.tuxcare.els3 x86_64 0:7.4.19-1.module_el8.5.0+2303+3052cfca.tuxcare.els24 x86_64 0:2.27.0-1.el8.tuxcare.els8 0:2.27.0-1.el8.tuxcare.els8 x86_64 4:20250512-1.el8.tuxcare.els1 x86_64 0:3.26.0-15.el8.tuxcare.els7 i686|x86_64 0:3.26.0-15.el8.tuxcare.els7 0:3.26.0-15.el8.tuxcare.els7 (^4\.18\.0\-348\.(\d{2,}|[7-9])(?:\.(\d{2,}|[1-9]))?\.el8_5\.tuxcare(\.(\d*))?(\.els(\d{3,}|[4-9]\d|3[0-9]))?\.(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els30 i686|x86_64 0:2.9.7-9.el8_4.2.tuxcare.els12 x86_64 0:2.9.7-9.el8_4.2.tuxcare.els12 x86_64 0:2.27.0-1.el8.tuxcare.els9 0:2.27.0-1.el8.tuxcare.els9 x86_64 0:2.28-164.el8.tuxcare.els9 i686|x86_64 0:2.28-164.el8.tuxcare.els9 x86_64 1:3.2-10.el8.tuxcare.els1 x86_64 4:5.26.3-420.el8.tuxcare.els4 0:0.99-420.el8.tuxcare.els4 x86_64 0:1.26-420.el8.tuxcare.els4 0:1.06-420.el8.tuxcare.els4 x86_64 0:1.28-420.el8.tuxcare.els4 0:1.34-420.el8.tuxcare.els4 x86_64 0:1.38-420.el8.tuxcare.els4 1:1.10-420.el8.tuxcare.els4 1:0.21-420.el8.tuxcare.els4 0:1.59-420.el8.tuxcare.els4 0:1.03-420.el8.tuxcare.els4 1:0.08-420.el8.tuxcare.els4 0:2.55-420.el8.tuxcare.els4 0:1.22.02-420.el8.tuxcare.els4 0:1.23-420.el8.tuxcare.els4 0:1.30-420.el8.tuxcare.els4 x86_64 0:1.31-420.el8.tuxcare.els4 i686|x86_64 4:5.26.3-420.el8.tuxcare.els4 4:5.26.3-420.el8.tuxcare.els4 0:1.11-420.el8.tuxcare.els4 0:5.26.3-420.el8.tuxcare.els4 x86_64 0:1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 i686|x86_64 0:1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 0:1.10.2-5.module_el8.5.0+2307+dc8e37a1.tuxcare.els1 i686|x86_64 0:3.6.16-4.el8.tuxcare.els6 x86_64 0:3.6.16-4.el8.tuxcare.els6 x86_64 0:2.27.0-1.el8.tuxcare.els10 0:2.27.0-1.el8.tuxcare.els10 (^4\.18\.0\-348\.(\d{2,}|[7-9])(?:\.(\d{2,}|[1-9]))?\.el8_5\.tuxcare(\.(\d*))?(\.els(\d{3,}|[4-9]\d|3[1-9]))?\.(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els31 0:0.074-1.el8.tuxcare.els1 0:2.18-397.el8.tuxcare.els1 x86_64 0:2.4.37-43.module_el8.5.0+2310+48d56fe5.tuxcare.els15 0:2.4.37-43.module_el8.5.0+2310+48d56fe5.tuxcare.els15 x86_64 1:2.4.37-43.module_el8.5.0+2310+48d56fe5.tuxcare.els15 i686|x86_64 0:0.9.4-3.el8.tuxcare.els5 0:0.9.4-3.el8.tuxcare.els5 i686|x86_64 0:3.6.8-42.el8.tuxcare.els14 x86_64 0:3.6.8-42.el8.tuxcare.els14 x86_64 1:2.2.6-40.el8.tuxcare.els5 i686|x86_64 1:2.2.6-40.el8.tuxcare.els5 1:2.2.6-40.el8.tuxcare.els5 i686|x86_64 0:3.6.16-4.el8.tuxcare.els7 x86_64 0:3.6.16-4.el8.tuxcare.els7 i686|x86_64 0:0.9.4-3.el8.tuxcare.els6 0:0.9.4-3.el8.tuxcare.els6 x86_64 1:1.1.1k-5.el8.5.tuxcare.els14 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els14 x86_64 0:2.28-164.el8.tuxcare.els10 i686|x86_64 0:2.28-164.el8.tuxcare.els10 i686|x86_64 0:2.56.4-156.el8.tuxcare.els4 0:2.56.4-156.el8.tuxcare.els4 x86_64 0:2.56.4-156.el8.tuxcare.els4 i686|x86_64 0:3.6.16-4.el8.tuxcare.els8 x86_64 0:3.6.16-4.el8.tuxcare.els8 x86_64 2:1.30-5.el8.tuxcare.els2 x86_64 0:2.27.0-1.el8.tuxcare.els11 0:2.27.0-1.el8.tuxcare.els11 x86_64 12:4.3.6-45.el8.tuxcare.els2 12:4.3.6-45.el8.tuxcare.els2 i686|x86_64 12:4.3.6-45.el8.tuxcare.els2 x86_64 7:4.15-1.module_el8.5.0+2313+eb714ac0.tuxcare.els14 (^4\.18\.0\-348\.(\d{2,}|[7-9])(?:\.(\d{2,}|[1-9]))?\.el8_5\.tuxcare(\.(\d*))?(\.els(\d{3,}|[4-9]\d|3[2-9]))?\.(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els32 x86_64 32:9.11.26-6.el8.tuxcare.els12 i686|x86_64 32:9.11.26-6.el8.tuxcare.els12 32:9.11.26-6.el8.tuxcare.els12 x86_64 1:2.2.6-40.el8.tuxcare.els6 i686|x86_64 1:2.2.6-40.el8.tuxcare.els6 1:2.2.6-40.el8.tuxcare.els6 x86_64 1:1.8.0.472.b08-1.el8.tuxcare.els1 1:1.8.0.472.b08-1.el8.tuxcare.els1 x86_64 0:2.4.37-43.module_el8.5.0+2317+cd59162f.tuxcare.els16 0:2.4.37-43.module_el8.5.0+2317+cd59162f.tuxcare.els16 x86_64 1:2.4.37-43.module_el8.5.0+2317+cd59162f.tuxcare.els16 x86_64 0:2.30-108.el8_5.1.tuxcare.els7 i686|x86_64 0:2.30-108.el8_5.1.tuxcare.els7 x86_64 0:8.0p1-10.el8.tuxcare.els8 x86_64 0:0.10.3-7.10.el8.tuxcare.els8 i686|x86_64 0:3.6.8-42.el8.tuxcare.els15 x86_64 0:3.6.8-42.el8.tuxcare.els15 i686|x86_64 0:2.5.0-1.el8.tuxcare.els1 x86_64 0:2.5.0-1.el8.tuxcare.els1 x86_64 0:2.7.18-7.module_el8.5.0+2326+694a54d9.tuxcare.els15 x86_64 0:7.61.1-22.el8.tuxcare.els15 i686|x86_64 0:7.61.1-22.el8.tuxcare.els15 x86_64 0:2.27.0-1.el8.tuxcare.els12 0:2.27.0-1.el8.tuxcare.els12 x86_64 0:8.0.44-1.module_el8.5.0+2333+ff83a1aa.tuxcare.els1 (^4\.18\.0\-348\.(\d{2,}|[7-9])(?:\.(\d{2,}|[1-9]))?\.el8_5\.tuxcare(\.(\d*))?(\.els(\d{3,}|[4-9]\d|3[3-9]))?\.(x86_64|i686)$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els33 x86_64 0:2.4.37-43.module_el8.5.0+2337+1762e49d.tuxcare.els17 0:2.4.37-43.module_el8.5.0+2337+1762e49d.tuxcare.els17 x86_64 1:2.4.37-43.module_el8.5.0+2337+1762e49d.tuxcare.els17 x86_64 0:2.2.20-3.el8.tuxcare.els1 x86_64 0:7.4.19-1.module_el8.5.0+2340+3e9fc4c7.tuxcare.els25 x86_64 1:2.2.6-40.el8.tuxcare.els7 i686|x86_64 1:2.2.6-40.el8.tuxcare.els7 1:2.2.6-40.el8.tuxcare.els7 x86_64 0:2.7.18-7.module_el8.5.0+2345+f19465c2.tuxcare.els16 i686|x86_64 0:3.6.8-42.el8.tuxcare.els16 x86_64 0:3.6.8-42.el8.tuxcare.els16 i686|x86_64 0:2.56.4-156.el8.tuxcare.els5 0:2.56.4-156.el8.tuxcare.els5 x86_64 0:2.56.4-156.el8.tuxcare.els5 x86_64 1:1.8.0.482.b08-1.el8.tuxcare.els1 1:1.8.0.482.b08-1.el8.tuxcare.els1 i686|x86_64 0:2.5.0-1.el8.tuxcare.els2 x86_64 0:2.5.0-1.el8.tuxcare.els2 x86_64 1:1.1.1k-5.el8.5.tuxcare.els15 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els15 (^4\.18\.0\-((?:(?:\d{4,}|[4-9]\d{2}|3[5-9]\d|349)(?:\.\d+)*|348\.(?:\d{2,}|[8-9])(?:\.\d+)*|348\.7\.(?:\d{2,}|[2-9])(?:\.\d+)*|348\.7\.1\.\d+(?:\.\d+)*)\.el8_5\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:348\.7\.1)\.el8_5\.tuxcare(?:\.\d+)?(?:\.els(?:\d{3,}|[4-9]\d|3[4-9]))?\.(?:x86_64|i686))$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els34 i686|x86_64 0:2.56.4-156.el8.tuxcare.els6 0:2.56.4-156.el8.tuxcare.els6 x86_64 0:2.56.4-156.el8.tuxcare.els6 i686|x86_64 0:3.6.8-42.el8.tuxcare.els17 x86_64 0:3.6.8-42.el8.tuxcare.els17 x86_64 0:2.7.18-7.module_el8.5.0+2354+0d350335.tuxcare.els17 1:2.02-106.el8.tuxcare.els10 x86_64 1:2.02-106.el8.tuxcare.els10 x86_64 0:2.7.18-7.module_el8.5.0+2356+010f68aa.tuxcare.els19 x86_64 1:1.1.1k-5.el8.5.tuxcare.els16 i686|x86_64 1:1.1.1k-5.el8.5.tuxcare.els16 (^4\.18\.0\-((?:(?:\d{4,}|[4-9]\d{2}|3[5-9]\d|349)(?:\.\d+)*|348\.(?:\d{2,}|[8-9])(?:\.\d+)*|348\.7\.(?:\d{2,}|[2-9])(?:\.\d+)*|348\.7\.1\.\d+(?:\.\d+)*)\.el8_5\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:348\.7\.1)\.el8_5\.tuxcare(?:\.\d+)?(?:\.els(?:\d{3,}|[4-9]\d|3[5-9]))?\.(?:x86_64|i686))$) x86_64 0:4.18.0-348.7.1.el8_5.tuxcare.els35 x86_64 0:7.61.1-22.el8.tuxcare.els16 i686|x86_64 0:7.61.1-22.el8.tuxcare.els16 x86_64 4:20251111-1.el8.tuxcare.els1 x86_64 0:7.61.1-22.el8.tuxcare.els17 i686|x86_64 0:7.61.1-22.el8.tuxcare.els17 i686|x86_64 0:2.5.0-1.el8.tuxcare.els3 x86_64 0:2.5.0-1.el8.tuxcare.els3 i686|x86_64 0:0.9.4-3.el8.tuxcare.els7 0:0.9.4-3.el8.tuxcare.els7 x86_64 0:7.61.1-22.el8.tuxcare.els18 i686|x86_64 0:7.61.1-22.el8.tuxcare.els18 x86_64 0:6.9.13.25-1.el8_5.tuxcare.els5 x86_64 0:6.9.13.25-1.el8_5.tuxcare.els7 x86_64 0:6.9.13.25-1.el8_5.tuxcare.els8 x86_64 0:8.0p1-10.el8.tuxcare.els9 x86_64 0:0.10.3-7.10.el8.tuxcare.els9 x86_64 0:6.9.13.25-1.el8_5.tuxcare.els10 x86_64 0:6.9.13.25-1.el8_5.tuxcare.els11 x86_64 7:4.15-1.module_el8.5.0+2369+dcd66620.tuxcare.els15 x86_64 0:2.30-108.el8_5.1.tuxcare.els9 i686|x86_64 0:2.30-108.el8_5.1.tuxcare.els9 x86_64 0:6.9.13.25-1.el8_5.tuxcare.els27