Tuxcare Errata System 0.0.1 5.10 2026-04-17T16:03:36 Red Hat Enterprise Linux 7 - CVE-2024-38428: properly re-implement userinfo parsing (rfc2396) Critical TuxCare License Agreement CVE-2024-38428 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Version was updated Critical TuxCare License Agreement CVE-2024-45491 CVE-2024-45490 CVE-2024-45492 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-28651: fix memory leak in RFC 2169 response parsing - CVE-2021-28652: fix broken cache manager URL parsing - CVE-2021-31806: fix memory management bug - CVE-2021-31807: fix integer overflow problem - CVE-2021-31808: fix input validation bug - CVE-2021-33620: handle more partial responses Important TuxCare License Agreement CVE-2024-45802 CVE-2024-25617 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Version was updated Important TuxCare License Agreement CVE-2024-7592 CVE-2024-6232 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-0840: fix stack-buffer-overflow at objdump disassemble_bytes Important TuxCare License Agreement CVE-2025-0840 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-3596: implement support for Message-Authenticator in libkrad Critical TuxCare License Agreement CVE-2024-37371 CVE-2024-37370 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables Important TuxCare License Agreement CVE-2025-27113 CVE-2025-32415 CVE-2025-32414 CVE-2024-25062 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks Important TuxCare License Agreement CVE-2021-3156 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions Critical TuxCare License Agreement CVE-2024-32002 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - ELS-1267: merge spec for centos7, rhel7 and oracle7 Critical TuxCare License Agreement CVE-2024-38477 CVE-2024-38476 CVE-2021-40438 CVE-2024-38474 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-9287: fix path names quoting to prevent command injection in virtual environment activation scripts Important TuxCare License Agreement CVE-2024-9287 CVE-2024-7592 CVE-2024-6232 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-1217: fix handling of folded headers by the http stream parser - CVE-2025-1734: fix validation of http headers with missing colon - CVE-2025-1861: fix incorrect http redirect location truncation Important TuxCare License Agreement CVE-2024-11234 CVE-2024-11233 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption. Important TuxCare License Agreement CVE-2024-0553 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade openjdk-shenandoah-jdk8u-shenandoah-jdk8u452-b09. That fixes the following CVE: CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698 Important TuxCare License Agreement CVE-2025-30698 CVE-2024-21217 CVE-2024-20919 CVE-2024-21145 CVE-2024-21235 CVE-2024-20952 CVE-2024-20918 CVE-2025-21587 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-10041: fix possibility of leakage of secret information stored in memory - CVE-2024-22365: fix potential DoS via mkfifo because the openat call lacks O_DIRECTORY Moderate TuxCare License Agreement CVE-2024-22365 CVE-2024-10041 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32728: fix logic error in DisableForwarding option Low TuxCare License Agreement CVE-2025-32728 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014} - netfilter: validate user input for expected length {CVE-2024-35896} - nfs: fix UAF in direct writes {CVE-2024-26958} - Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982} - RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872} Important TuxCare License Agreement CVE-2023-51779 CVE-2024-36883 CVE-2024-39487 CVE-2024-41071 CVE-2023-52885 CVE-2021-30178 CVE-2021-38160 CVE-2021-47118 CVE-2021-46936 CVE-2022-42719 CVE-2023-35824 CVE-2023-52435 CVE-2023-3567 CVE-2021-3612 CVE-2024-26668 CVE-2023-6610 CVE-2023-6606 CVE-2022-3424 CVE-2021-37159 CVE-2025-21702 CVE-2024-53197 CVE-2023-4387 CVE-2023-40283 CVE-2023-3111 CVE-2023-2124 CVE-2023-1989 CVE-2023-1838 CVE-2023-1829 CVE-2022-20141 CVE-2022-1652 CVE-2022-1353 CVE-2022-1055 CVE-2021-45868 CVE-2021-45485 CVE-2021-43976 CVE-2021-43389 CVE-2021-4159 CVE-2021-4157 CVE-2021-4149 CVE-2021-40490 CVE-2021-3679 CVE-2024-38600 CVE-2024-26898 CVE-2024-26882 CVE-2024-38538 CVE-2024-42148 CVE-2024-46673 CVE-2024-46724 CVE-2024-46813 CVE-2024-47742 CVE-2024-49882 CVE-2024-49860 CVE-2024-53150 CVE-2024-53142 CVE-2024-53156 CVE-2024-56759 CVE-2024-56605 CVE-2024-56551 CVE-2024-50143 CVE-2024-50234 CVE-2024-46744 CVE-2025-21969 CVE-2025-21920 CVE-2024-50267 CVE-2024-43839 CVE-2024-47745 CVE-2024-38570 CVE-2024-50055 CVE-2024-27043 CVE-2025-21993 CVE-2024-49967 CVE-2021-43975 CVE-2021-41864 CVE-2021-0129 CVE-2023-1380 CVE-2022-3566 CVE-2022-0850 CVE-2023-42753 CVE-2023-39197 CVE-2023-3141 CVE-2021-3640 CVE-2021-34693 CVE-2023-52752 CVE-2023-52628 CVE-2023-52469 CVE-2023-52445 CVE-2023-52340 CVE-2023-51780 CVE-2023-4623 CVE-2022-29581 CVE-2022-28390 CVE-2022-2639 CVE-2022-25265 CVE-2022-2196 CVE-2022-21499 CVE-2022-20368 CVE-2021-3609 CVE-2021-31916 CVE-2021-3178 CVE-2021-28971 CVE-2021-28964 CVE-2024-49889 CVE-2024-44970 CVE-2024-46750 CVE-2024-46800 CVE-2024-42301 CVE-2024-0775 CVE-2024-35849 CVE-2024-43900 CVE-2024-43882 CVE-2024-46722 CVE-2024-46738 CVE-2024-46723 CVE-2024-50073 CVE-2024-47701 CVE-2024-49960 CVE-2024-50033 CVE-2024-53227 CVE-2024-56606 CVE-2024-53239 CVE-2024-53104 CVE-2024-57980 CVE-2024-56604 CVE-2024-26689 CVE-2024-49991 CVE-2024-36960 CVE-2024-42228 CVE-2024-57798 CVE-2024-47659 CVE-2024-50115 CVE-2024-27008 CVE-2024-41014 CVE-2024-23307 CVE-2022-1419 CVE-2022-1679 CVE-2023-3268 CVE-2022-45886 CVE-2022-26365 CVE-2024-46756 CVE-2024-38627 CVE-2022-3629 CVE-2024-36971 CVE-2024-27020 CVE-2024-26934 CVE-2024-26923 CVE-2024-26855 CVE-2023-6932 CVE-2023-6931 CVE-2023-1513 CVE-2023-1118 CVE-2023-1077 CVE-2022-45934 CVE-2022-45919 CVE-2022-42895 CVE-2022-1048 CVE-2022-1016 CVE-2022-1011 CVE-2022-0812 CVE-2021-47383 CVE-2021-47194 CVE-2021-46906 CVE-2024-26872 CVE-2024-26791 CVE-2021-3659 CVE-2022-4095 CVE-2022-41858 CVE-2021-3923 CVE-2022-33740 CVE-2021-47153 CVE-2021-46932 CVE-2023-51042 CVE-2023-45862 CVE-2021-47171 CVE-2021-20292 CVE-2020-26555 CVE-2019-25162 CVE-2024-50302 CVE-2024-46758 CVE-2024-46757 CVE-2024-41013 CVE-2024-38555 CVE-2022-42720 CVE-2022-41674 CVE-2022-3640 CVE-2022-36280 CVE-2022-3565 CVE-2022-33742 CVE-2022-33741 CVE-2022-3028 CVE-2021-20322 CVE-2021-20321 CVE-2020-27820 CVE-2020-13974 CVE-2018-10087 CVE-2024-49894 CVE-2024-50007 CVE-2024-35896 CVE-2024-26958 CVE-2024-44987 CVE-2024-46731 CVE-2024-50035 CVE-2024-49950 CVE-2024-53057 CVE-2024-53173 CVE-2024-56650 CVE-2024-50282 CVE-2025-37785 CVE-2024-56603 CVE-2024-46818 CVE-2024-44940 CVE-2024-39494 CVE-2024-53141 CVE-2024-42280 CVE-2024-53103 CVE-2024-26982 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted code Moderate TuxCare License Agreement CVE-2020-11023 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-12747: fix symlink race condition in sender Important TuxCare License Agreement CVE-2024-12088 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write - Debrand to Cloudlinux Important TuxCare License Agreement CVE-2025-0678 CVE-2024-56737 CVE-2024-45782 CVE-2024-45781 CVE-2025-1125 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32462: fix privilege escalation vulnerability by restricting unauthorized users from gaining elevated system privileges via the Sudo host option Important TuxCare License Agreement CVE-2025-32462 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32906: fix out-of-bound read vulnerability - CVE-2025-32911: fix use-after-free vulnerability - CVE-2025-32913: fix NULL pointer dereference Critical TuxCare License Agreement CVE-2025-32906 CVE-2025-32911 CVE-2025-32913 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-48384: config: quote values containing CR character Important TuxCare License Agreement CVE-2025-48384 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32050: fix overflow in append_param_quoted() - CVE-2025-32052: fix heap buffer overflow in soup_content_sniffer_sniff() - CVE-2025-32053: fix heap buffer overflow in sniff_feed_or_html() - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in soup_header_parse_quality_list() - CVE-2025-46421: strip authentication credentails on cross-origin redirect - CVE-2025-2784: fix heap buffer over-read when sniffing content via the skip_insight_whitespace() function Moderate TuxCare License Agreement CVE-2025-46420 CVE-2025-32907 CVE-2025-32053 CVE-2025-32052 CVE-2025-46421 CVE-2025-32050 CVE-2025-2784 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file Critical TuxCare License Agreement CVE-2025-49794 CVE-2025-49796 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-1220: error if host contains null bytes in the middle of the string Moderate TuxCare License Agreement CVE-2025-1220 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-1735: add error checking for pgsql extension escape functions, mainly to fix possible issues with multi-byte encoding of Postgres databases Important TuxCare License Agreement CVE-2025-1735 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u462-b08 (GA). That fixes following CVEs: - CVE-2025-30749: better Glyph drawing - CVE-2025-30754: enhance TLS protocol support - CVE-2025-30761: improve scripting supports - CVE-2025-50106: glyph out-of-memory access and crash Important TuxCare License Agreement CVE-2025-30761 CVE-2025-50106 CVE-2025-30754 CVE-2025-30749 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-6965: fix memory corruption issue caused by a query where the number of aggregate terms could exceed the number of columns available. Critical TuxCare License Agreement CVE-2025-6965 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-6491: fix buffer overflow vulnerability Moderate TuxCare License Agreement CVE-2025-6491 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths Moderate TuxCare License Agreement CVE-2024-46901 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-27613: fix issue where untrusted repositories could create and truncate files, with the fix implemented in versions 2.43.7 and later Moderate TuxCare License Agreement CVE-2025-27613 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-4408: reapply patch without dns_name_t ABI change. Important TuxCare License Agreement CVE-2024-1737 CVE-2024-11187 CVE-2024-1975 CVE-2023-50387 CVE-2023-50868 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-55549: fix use-after-free issue related to exclusion of result prefixes Important TuxCare License Agreement CVE-2025-24855 CVE-2024-55549 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-5564: validate route information option length Important TuxCare License Agreement CVE-2024-5564 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Fix deleting job when iSCSi used - /dev/lve is added into the list of private devices Important TuxCare License Agreement CVE-2023-26604 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-27363: fix OOB write when parsing font subglyph structures Important TuxCare License Agreement CVE-2025-27363 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922} - udmabuf: fix a buf size overflow issue during udmabuf creation {CVE-2025-37803} Important TuxCare License Agreement CVE-2025-37803 CVE-2023-52922 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c - CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c Important TuxCare License Agreement CVE-2024-56171 CVE-2025-24928 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0(ver:0x0A70C005), cpuid:0x00A70F52(ver:0x0A705206), cpuid:0x00A00F82(ver:0x0A00820C), cpuid:0x00A40F41(ver:0x0A404107), cpuid:0x00A70F80(ver:0x0A708007), cpuid:0x00A20F10(ver:0x0A20102D), cpuid:0x00A70F41(ver:0x0A704107), cpuid:0x00A60F12(ver:0x0A601209), cpuid:0x00A10F81(ver:0x0A108108), cpuid:0x00A50F00(ver:0x0A500011), cpuid:0x00A20F12(ver:0x0A201210); - Addition AMD CPU microcode for processor family 0x17: cpuid:0x00870F10(ver:0x08701034), cpuid:0x00860F01(ver:0x0860010D), cpuid:0x00860F81(ver:0x08608108); - Update AMD CPU microcode for processor family 0x17: cpuid:0x008A0F00(ver:0x08A0000A); Important TuxCare License Agreement CVE-2023-31315 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-24528: fix buffer overflow vulnerability in iprop log file writing Moderate TuxCare License Agreement CVE-2025-24528 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-52337: sanitize API arguments to prevent log spoofing by both escaping ' characters and restricting newlines from being inserted Moderate TuxCare License Agreement CVE-2024-52337 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-50868: avoid availabiluty of the remote attackers to cause a denial of service using DNSSEC Important TuxCare License Agreement CVE-2023-50387 CVE-2023-50868 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-0624: net: Fix OOB write in grub_net_search_config_file() Important TuxCare License Agreement CVE-2025-0624 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-1244: fix man.el shell injection vulnerability Important TuxCare License Agreement CVE-2025-1244 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-1736: fix incorrect validation of CRLF in http headers Important TuxCare License Agreement CVE-2025-1736 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-26594: refuse to free the root cursor and keep its ref - CVE-2025-26595: fix buffer overflow in XkbVModMaskText() - CVE-2025-26596: xkb: fix computation of XkbSizeKeySyms - CVE-2025-26597: xkb: fix buffer overflow in XkbChangeTypesOfKey() - CVE-2025-26598: Xi: Fix barrier device search - CVE-2025-26599: always initialize the border clip in compAllocPixmap() - CVE-2025-26600: dix: Dequeue pending events on frozen device on removal - CVE-2025-26601: postpone actual changes in SyncChangeAlarmAttributes() Important TuxCare License Agreement CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 CVE-2025-26601 CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 CVE-2025-26597 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-46846: fix Request/Response chunk smuggling in HTTP/1.1 and ICAP Moderate TuxCare License Agreement CVE-2023-46846 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-54574: fix heap buffer overflow in URN parsing Critical TuxCare License Agreement CVE-2025-54574 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2016-9840: fix undefined behavior in inftrees.c Important TuxCare License Agreement CVE-2016-9840 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2014-9474: Fix of a buffer overflow due to incorrect GMP documentation for mpn_set_str Critical TuxCare License Agreement CVE-2014-9474 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by 'atype' corruption - CVE-2025-6021: fix integer overflows in buffer size calculations Important TuxCare License Agreement CVE-2025-7425 CVE-2025-6021 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-49180: fix integer overflow in the RandR extension affecting the RRChangeProviderProperty function Important TuxCare License Agreement CVE-2025-49180 CVE-2025-49179 CVE-2025-49176 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-6020: fix potential privilege escalation in pam_namspace Important TuxCare License Agreement CVE-2025-6020 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-49178: fix request handling flaw causing potential denial of service Moderate TuxCare License Agreement CVE-2025-49178 CVE-2025-49175 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Update Intel CPU microcode to 20250812: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Addition of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) at revision 0xa000100; - Addition of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) at revision 0x10003d0; - Addition of cpuid:B0650/0x80 (ARL-U A1) microcode (in microcode.dat) at revision 0xa; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Addition of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) at revision 0x123; - Addition of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0664/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06A2/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002b3; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Update of cpuid:50657/0xbf (CLX-SP/W/X B1/L1) microcode (in microcode.dat) from revision 0x5003707 up to 0x5003901; - Update of cpuid:5065B/0xbf (CPX-SP A1) microcode (in microcode.dat) from revision 0x7002904 up to 0x7002b01; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003f5 up to 0xd000410; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002c0 up to 0x10002e0; - Update of cpuid:706A8/0x01 (GLK-R R0) microcode (in microcode.dat) from revision 0x24 up to 0x26; - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode (in microcode.dat) from revision 0xc6 up to 0xca; - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode (in microcode.dat) from revision 0xb8 up to 0xbc; - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode (in microcode.dat) from revision 0x38 up to 0x3c; - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode (in microcode.dat) from revision 0x52 up to 0x56; - Update of cpuid:806EC/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x9 up to 0xa; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x436 up to 0x437; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x102 up to 0x104; - Update of cpuid:A0652/0x20 (CML-H R1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0653/0x22 (CML-S 6+2 G1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0655/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0660/0x80 (CML-U 6+2 A0) microcode (in microcode.dat) from revision 0xfe up to 0x102; - Update of cpuid:A0661/0x80 (CML-U 6+2 v2 K1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x63 up to 0x64; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x20 up to 0x25; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000330 up to 0x3000362; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12c up to 0x12f; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1c up to 0x1d; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000291 up to 0x210002b3; Moderate TuxCare License Agreement CVE-2024-28956 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdk_pixbuf__jpeg_image_load_increment() Important TuxCare License Agreement CVE-2025-7345 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-4802: prevent untrusted LD_LIBRARY_PATH from loading dynamically shared libraries in statically compiled binaries that call dlopen Important TuxCare License Agreement CVE-2025-4802 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - x86/kvm: Disable kvmclock on all CPUs on shutdown {CVE-2021-47110} - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352} - cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919} - aio: mark AIO pseudo-fs noexec {CVE-2016-10044} - cifs: potential buffer overflow in handling symlinks {CVE-2022-49058} - NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232} - nfsd: register pernet ops last, unregister first {CVE-2025-38232} - do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} - net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180} - net: atm: add lec_mutex {CVE-2025-38180} - SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174} - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399} - scsi: target: Fix crash during SPEC_I_PT handling {CVE-2025-38399} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085} - drivers:md:fix a potential use-after-free bug {CVE-2022-50022} - ext4: avoid resizing to a partial cluster size {CVE-2022-50020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928} - net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457} - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788} - dlm: fix plock invalid read {CVE-2022-49407} - net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} - scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114} - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} - HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495} - ext4: Fix possible corruption when moving a directory {CVE-2023-53137} - ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770} - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} - sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177} - ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305} - ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50229} - dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823} - md-raid10: fix KASAN warning {CVE-2022-50211} - scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332} - ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386} - media: cxusb: no longer judge rbuf when the write fails {CVE-2025-38229} - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} - ext4: fix off-by-one error in do_split {CVE-2025-23150} - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init {CVE-2025-37878} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200} Important TuxCare License Agreement CVE-2025-23150 CVE-2022-50211 CVE-2025-38403 CVE-2025-38232 CVE-2025-38495 CVE-2025-38494 CVE-2025-38399 CVE-2025-38386 CVE-2025-38332 CVE-2025-38229 CVE-2025-38212 CVE-2025-38200 CVE-2025-38180 CVE-2025-38085 CVE-2025-38079 CVE-2025-37878 CVE-2025-37823 CVE-2024-53174 CVE-2024-42305 CVE-2023-53137 CVE-2023-53125 CVE-2022-50229 CVE-2022-49770 CVE-2022-49407 CVE-2022-49122 CVE-2022-49114 CVE-2022-49058 CVE-2022-48919 CVE-2025-38556 CVE-2025-38498 CVE-2025-38457 CVE-2021-47110 CVE-2016-10044 CVE-2025-38352 CVE-2025-38177 CVE-2022-50022 CVE-2022-50020 CVE-2025-38000 CVE-2022-49788 CVE-2025-21928 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Bump release to override the rhel els Important TuxCare License Agreement CVE-2021-28651 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350} - sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000} - sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent {CVE-2025-38350} Important TuxCare License Agreement CVE-2025-37932 CVE-2025-37798 CVE-2025-38350 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2019-9169: fix heap-based buffer over-read in proceed_next_node function in posix/regexec.c Critical TuxCare License Agreement CVE-2019-9169 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2017-9224: fix out-of-bounds read of a stack in match_at function - CVE-2017-9226: fix out-of-bounds write or read of a heap in next_state_val function - CVE-2017-9227: fix out-of-bounds read of a stack in mbc_enc_len function Critical TuxCare License Agreement CVE-2017-9224 CVE-2017-9227 CVE-2017-9226 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Port side-channel silent functions from 3.4.1. Partially fix for CVE-2018-16869 - CVE-2018-16869: Add side-channel silent memory, math, PKCS1, RSA functions - Added tests for side-channel silent implementations Moderate TuxCare License Agreement CVE-2018-16869 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32990: fix memory corruption in when parsing a template file Important TuxCare License Agreement CVE-2025-32990 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-47252: escape user-supplied data in mod_ssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attack Important TuxCare License Agreement CVE-2024-47252 CVE-2025-49812 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - spec: up spec/misc to 1160.136.1, spectre mitigation is off by default - hugetlb, mempolicy: fix the mbind hugetlb migration - net: atm: fix use after free in lec_send() - net: atlantic: fix aq_vec index out of range error - block: initialize flush request via blk_mq_rq_ctx_init() - ALSA: usb-audio: Fix a DMA to stack memory bug - namei: ->d_inode of a pinned dentry is stable only for positives - namei: results of d_is_negative() should be checked after dentry revalidation - namei: d_is_negative() should be checked before ->d_seq validation - VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk - scsi: smartpqi: Fix DMA direction for RAID requests - scsi: smartpqi: Fix duplicate device nodes for tape changers - VFS: Impose ordering on accesses of d_inode and d_flags - neighbour: fix data-races around n->output - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options - cipso: fix total option length computation - proc: Use new_inode not new_inode_pseudo - lockd: skip shutdown of rpc clients with outstanding notifications - SUNRPC: ECONNRESET might require a rebind - SUNRPC: ECONNREFUSED should cause a rebind - x86/fpu: Prevent FPU state corruption - x86, fpu: Introduce per-cpu in_kernel_fpu state - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA - x86/bugs: Fix BHI documentation {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry {CVE-2024-2201} - Documentation/hw-vuln: Document the interaction between IBRS and STIBP - x86/bugs: Add X86_FEATURE_RETPOLINE - x86/bugs: Extend VMware Retbleed workaround to Nehalem - gfs2: Fix length of holes reported at end-of-file - gfs2: Only do glock put in gfs2_create_inode for free inodes - gfs2: Fix use-after-free in gfs2_logd after withdraw - gfs2: fix use-after-free in trans_drain - gfs2: Clean up revokes on normal withdraws - GFS2: gfs2_free_extlen can return an extent that is too long - gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe - GFS2: Refactor gfs2_remove_from_journal - GFS2: Only set PageChecked for jdata pages - gfs2: keep bios separate for each journal - gfs2: Remove active journal side effect from gfs2_write_log_header - gfs2: clean_journal improperly set sd_log_flush_head - partial "GFS2: Introduce new gfs2_log_header_v2" - gfs2: change from write to read lock for sd_log_flush_lock in journal replay - GFS2: Reduce code redundancy writing log headers - gfs2: Grab glock reference sooner in gfs2_add_revoke - gfs2: fix glock reference problem in gfs2_trans_remove_revoke - gfs2: Fix occasional glock use-after-free - gfs2: Make sure we don't miss any delayed withdraws - gfs2: Fix bad comment for trans_drain - gfs2: add some much needed cleanup for log flushes that fail - gfs2: fix trans slab error when withdraw occurs inside log_flush - gfs2: initialize transaction tr_ailX_lists earlier - GFS2: Remove extra "if" in gfs2_log_flush() - gfs2: fix use-after-free on transaction ail lists - gfs2: Trim the ordered write list in gfs2_ordered_write() - GFS2: Clean up releasepage - gfs2: Only set PageChecked if we have a transaction - gfs2: Fix case in which ail writes are done to jdata holes - gfs2: simplify gfs2_block_map - gfs2: Remove unused gfs2_iomap_alloc argument - netfilter: ipset: fix ip_set_list allocation failure - gfs2: Be more careful with the quota sync generation - gfs2: Get rid of some unnecessary quota locking - gfs2: Add some missing quota locking - gfs2: Fold qd_fish into gfs2_quota_sync - gfs2: quota need_sync cleanup - gfs2: Fix and clean up function do_qc - gfs2: Revert "Add quota_change type" - gfs2: Revert "ignore negated quota changes" - gfs2: qd_check_sync cleanups - gfs2: Check quota consistency on mount - gfs2: Minor gfs2_quota_init error path cleanup - gfs2: fix kernel BUG in gfs2_quota_cleanup - gfs2: Clean up quota.c:print_message - gfs2: Clean up gfs2_alloc_parms initializers - gfs2: Two quota=account mode fixes - gfs2: Remove useless assignment - gfs2: simplify slot_get - gfs2: Simplify qd2offset - gfs2: Remove quota allocation info from quota file - gfs2: use constant for array size - gfs2: Set qd_sync_gen in do_sync - gfs2: Remove useless err set - gfs2: Small gfs2_quota_lock cleanup - gfs2: move qdsb_put and reduce redundancy - gfs2: Don't try to sync non-changes - gfs2: Simplify function need_sync - gfs2: remove unneeded pg_oflow variable - gfs2: remove unneeded variable done - gfs2: pass sdp to gfs2_write_buf_to_page - gfs2: pass sdp in to gfs2_write_disk_quota - gfs2: Pass sdp to gfs2_adjust_quota - gfs2: remove dead code for quota writes - gfs2: Use qd_sbd more consequently - gfs2: replace 'found' with dedicated list iterator variable - gfs2: Some whitespace cleanups - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold - tcp: fix zero cwnd in tcp_cwnd_reduction - epoll: fix use-after-free in eventpoll_release_file - kernel.spec: run initramfs generation in %post (not only in %posttrans) Important TuxCare License Agreement CVE-2024-2201 CVE-2025-22004 CVE-2022-50066 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Fix spec-file for CVE-2019-9169 Critical TuxCare License Agreement CVE-2019-9169 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-52533: fix off-by-one error leading to buffer overflow in gsocks4aproxy.c Important TuxCare License Agreement CVE-2024-52533 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2017-9228: fix heap out-of-bounds write in bitset_set_range() and parse_char_class() functions Critical TuxCare License Agreement CVE-2017-9228 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-46835: prevent malicious creating and overwriting of user's files Low TuxCare License Agreement CVE-2025-46835 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - ASoC: topology: Clean up route loading {CVE-2024-41069} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966} - media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621} - inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103} - scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - virtio-net: Add validation for used length {CVE-2021-47352} - watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321} - scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929} - wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} - mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961} - platform/x86: wmi: Fix opening of char device {CVE-2023-52864} - media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} - wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} - net: fix information leakage in /proc/net/ptype {CVE-2022-48757} - crypto: qat - resolve race condition during AER recovery {CVE-2024-26974} - perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835} - net: ti: fix UAF in tlan_remove_one {CVE-2021-47310} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594} - net: bridge: use DEV_STATS_INC() {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields {CVE-2023-52578} - media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884} - media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885} - xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039} - xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037} - xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038} - ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386} - ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292} Important TuxCare License Agreement CVE-2021-47103 CVE-2022-48760 CVE-2023-52578 CVE-2024-26961 CVE-2024-40978 CVE-2024-40929 CVE-2023-52835 CVE-2023-52594 CVE-2021-47497 CVE-2024-35965 CVE-2024-53214 CVE-2024-40901 CVE-2024-26974 CVE-2023-52864 CVE-2023-52764 CVE-2023-52530 CVE-2023-0386 CVE-2022-49292 CVE-2022-48757 CVE-2022-48695 CVE-2022-45885 CVE-2022-45884 CVE-2022-23039 CVE-2022-23038 CVE-2022-23037 CVE-2021-47352 CVE-2021-47321 CVE-2021-47310 CVE-2024-41069 CVE-2024-56616 CVE-2025-21704 CVE-2024-52332 CVE-2024-35966 CVE-2024-39499 CVE-2024-38621 CVE-2024-36921 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2007-4559: implement PEP 706 - a filter in the tarfile module to prevent directory traversal vulnerability Low TuxCare License Agreement CVE-2007-4559 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2019-1547: fix side-channel vulnerability in ECDSA when using explicit EC parameters without cofactor - CVE-2025-9230: fix incorrect check of unwrapped key size Moderate TuxCare License Agreement CVE-2019-1547 CVE-2025-9230 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Bump package Release to 21.0.5 - CVE-2025-8194: tarfile: validate archives to ensure member offsets are non-negative Important TuxCare License Agreement CVE-2025-8194 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - ext4: fix possible UAF when remounting r/o a mmp-protected file system {CVE-2021-47342} - ext4: fix memory leak in ext4_fill_super - net: defer final 'struct net' free in netns dismantle {CVE-2024-56658} - net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477} - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() {CVE-2022-48701} - fix: virtio-net: Add validation for used length {CVE-2021-47352} Important TuxCare License Agreement CVE-2024-56658 CVE-2021-47342 CVE-2022-48701 CVE-2022-48827 CVE-2023-52868 CVE-2022-48738 CVE-2021-47391 CVE-2024-38659 CVE-2025-38477 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-58060: fix authentication bypass by checking password when AuthType is set to anything but Basic. Important TuxCare License Agreement CVE-2025-58060 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-35235: patch arbitrary chmod vulnerability in cupsd process when starting server with symbolic link Listen configuration item Moderate TuxCare License Agreement CVE-2024-35235 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2016-9840: fix improper pointer arithmetic in inftrees.c Important TuxCare License Agreement CVE-2016-9840 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-4948: fix integer underflow in soup_multipart_new_from_message() - CVE-2025-32049: fix Denial of Service attack to websocket server - CVE-2025-32914: fix OOB Read through soup_multipart_new_from_message() Important TuxCare License Agreement CVE-2025-32049 CVE-2025-32914 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data") Important TuxCare License Agreement CVE-2024-12718 CVE-2025-4330 CVE-2025-4138 CVE-2025-4517 CVE-2025-4435 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-8194: fix infinite loop and deadlock in TarFile extraction and entry enumeration APIs Important TuxCare License Agreement CVE-2025-8194 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure - email_err_data directive now defaults to 'off' for security (previously 'on') Important TuxCare License Agreement CVE-2025-62168 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic Important TuxCare License Agreement CVE-2025-11021 CVE-2025-4945 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-9632: fix buffer overflow in _XkbSetCompatMap() - CVE-2025-62229: fix use-after-free condition due improper error handling during notification creation leading to DoS - CVE-2025-62230: fix use-after-free condition due freeing certain data structures without properly detaching related resources - CVE-2025-62231: fix unsigned short overflow in XkbSetCompatMap() function Important TuxCare License Agreement CVE-2024-9632 CVE-2025-62230 CVE-2025-62231 CVE-2025-62229 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u472-b08 (GA). Moderate TuxCare License Agreement CVE-2025-53066 CVE-2025-53057 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-8508: limit number of name compression calculations per packet to prevent denial of service attacks. Moderate TuxCare License Agreement CVE-2024-8508 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - xfrm: Duplicate SPI Handling {CVE-2025-39965} - xfrm: state: use atomic_inc_not_zero to increment refcount - padata: Fix pd UAF once and for all {CVE-2025-38584} - padata: Remove broken queue flushing {CVE-2023-52854} - padata: ensure padata_do_serial() runs on the correct CPU - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put {CVE-2022-3640} - ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917} - ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918} - ipvs: use explicitly signed chars - vt: Clear selection before changing the font {CVE-2022-49948} - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117} - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900} - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000} - igb: Do not free q_vector unless new one was allocated {CVE-2022-50252} - scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546} - net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907} - dm raid: fix address sanitizer warning in raid_status {CVE-2022-50084} - dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085} - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870} - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258} - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250} - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751} - jbd2: remove wrong sb->s_sequence check {CVE-2025-37839} - net_sched: hfsc: Fix a UAF vulnerability in class handling - crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} Important TuxCare License Agreement CVE-2022-23042 CVE-2023-53305 CVE-2025-38584 CVE-2022-49870 CVE-2022-50252 CVE-2022-20566 CVE-2022-49948 CVE-2023-53373 CVE-2022-49918 CVE-2022-49917 CVE-2025-39751 CVE-2022-50258 CVE-2023-52854 CVE-2025-38718 CVE-2022-50085 CVE-2022-50386 CVE-2022-48900 CVE-2025-39965 CVE-2023-53117 CVE-2023-53365 CVE-2025-37839 CVE-2023-53000 CVE-2022-21546 CVE-2025-38250 CVE-2022-50408 CVE-2022-49907 CVE-2025-37882 CVE-2025-39797 CVE-2022-50084 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade to openjdk-11.0.29+7 (GA). Important TuxCare License Agreement CVE-2025-21587 CVE-2024-21147 CVE-2023-48161 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - crypto: lzo - Fix compression buffer overrun {CVE-2025-38068} - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863} - NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945} - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186} - can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004} - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} - ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} - ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403} - scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729} - ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886} - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245} - atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459} - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051} Important TuxCare License Agreement CVE-2023-53322 CVE-2024-35886 CVE-2022-50367 CVE-2025-38068 CVE-2022-2978 CVE-2025-38004 CVE-2025-38051 CVE-2022-50403 CVE-2025-38157 CVE-2025-38415 CVE-2025-38459 CVE-2025-39955 CVE-2025-38729 CVE-2022-50410 CVE-2022-43945 CVE-2025-38245 CVE-2025-40186 CVE-2025-39863 CVE-2025-39757 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-58098: fix passes the shell-escaped query string to #exec cmd="..." directives Important TuxCare License Agreement CVE-2025-58098 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-52005: add sideband.allowControlCharacters config which gives a possibility to avoid control characters in sideband - CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration Important TuxCare License Agreement CVE-2024-52006 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-32021: fix symlink bypass, abort when hardlinked source and target file differ Important TuxCare License Agreement CVE-2024-32021 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-31484: add verify_SSL=>1 to HTTP::Tiny to verify https server identity Important TuxCare License Agreement CVE-2023-31484 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-50349: fix ANSI escape sequence vulnerability that occurs when asking for credentials interactively Moderate TuxCare License Agreement CVE-2024-50349 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978} - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() - nfsd: don't ignore the return code of svc_proc_register() {CVE-2025-22026} - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull {CVE-2023-53104} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class - HID: stop exporting hid_snto32() - HID: simplify snto32() - HID: core: fix shift-out-of-bounds in hid_report_raw_event {CVE-2022-48978} - HID: core: detect and skip invalid inputs to snto32() - HID: core: don't use negative operands when shift Important TuxCare License Agreement CVE-2022-2978 CVE-2025-22026 CVE-2023-53104 CVE-2022-48978 CVE-2023-53297 CVE-2022-50367 CVE-2022-50356 CVE-2025-40271 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds write for malicious input Important TuxCare License Agreement CVE-2025-68973 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-14523: reject duplicate Host headers to prevent request smuggling, cache poisoning, and host-based access control bypass attacks Important TuxCare License Agreement CVE-2025-14523 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} - scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} - ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-53705} - libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285} - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write {CVE-2023-53282} - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419} - firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432} - net: openvswitch: fix nested key length validation in the set() action - wifi: mac80211_hwsim: drop short frames {CVE-2023-53321} - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422} - fix: crypto: lzo - Fix compression buffer overrun - fix: NFSD: Protect against send buffer overflow in NFSv2 READ - cifs: fix oops during encryption {CVE-2022-50341} - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL - fix smb3-encryption breakage when CONFIG_DEBUG_SG=y - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406} - mm: zswap: fix missing folio cleanup in writeback race path {CVE-2024-26832} - mm: fix zswap writeback race condition - Bluetooth: prefetch channel before killing sock - Bluetooth: Fix l2cap_disconnect_req deadlock - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827} - Bluetooth: Fix refcount use-after-free issue - Bluetooth: Check state in l2cap_disconnect_rsp - Bluetooth: L2CAP: Fix build errors in some archs - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - Bluetooth: use the correct print format for L2CAP debug statements - i40e: fix Jumbo Frame support after iPXE boot - i40e: Report MFS in decimal base instead of hex - i40e: Fix unexpected MFS warning message - i40e: Add a check to see if MFS is set - bitops: Add non-atomic bitops for pointers - bitfield: Add FIELD_MODIFY() helper Important TuxCare License Agreement CVE-2022-50422 CVE-2024-26832 CVE-2023-53705 CVE-2022-50419 CVE-2023-53827 CVE-2022-50406 CVE-2025-39817 CVE-2022-50341 CVE-2023-53432 CVE-2023-53282 CVE-2023-53321 CVE-2023-53297 CVE-2023-53675 CVE-2025-68285 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Update to openjdk-shenandoah-jdk8u-shenandoah-jdk8u482-b03. - CVE-2026-21945: Security component vulnerability allowing unauthenticated attacker with network access to cause hang or crash (DoS). Important TuxCare License Agreement CVE-2026-21945 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-13601: Fix heap-based buffer overflow by correcting buffer size calculation in g_escape_uri_string() function Important TuxCare License Agreement CVE-2025-13601 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-24515: Fix a null pointer dereference in the XML parser caused by the failure to copy user data for unknown encoding handlers Low TuxCare License Agreement CVE-2026-24515 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex() Important TuxCare License Agreement CVE-2025-69421 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618} - cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945} - scsi: bfa: Double-free fix {CVE-2025-38699} - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521} - usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760} - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680} - fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691} - bna: ensure the copied buf is NUL terminated {CVE-2024-36934} - i40e: fix idx validation in config queues msg {CVE-2025-39971} Important TuxCare License Agreement CVE-2025-38572 CVE-2025-38702 CVE-2025-38618 CVE-2025-39945 CVE-2025-38574 CVE-2025-38699 CVE-2025-39691 CVE-2023-53521 CVE-2025-38680 CVE-2025-39971 CVE-2025-38685 CVE-2024-36934 CVE-2025-39760 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-61662: fix use-after-free in gettext/gettext due to unregistered gettext command on module unload Important TuxCare License Agreement CVE-2025-61662 CVE-2025-0622 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-1761: fix stack-based buffer overflow in multipart HTTP response parsing caused by incorrect length calculation in soup_filter_input_stream_read_until() - CVE-2026-0719: fix stack-based buffer overflow in NTLM authentication caused by integer overflow in md4sum() with excessively long passwords Important TuxCare License Agreement CVE-2026-1761 CVE-2026-0719 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-14087: fix integer overflow in GVariant parser leading to heap corruption via buffer underflow when processing malicious input strings Critical TuxCare License Agreement CVE-2025-14087 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2015-20107: fix shell command injection vulnerability in the mailcap module Important TuxCare License Agreement CVE-2015-20107 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-42516: fix HTTP response splitting by reordering header validation to occur after full response header assembly. Moderate TuxCare License Agreement CVE-2024-42516 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2016-9843: avoid pre-decrement of pointer in big-endian CRC calculation Critical TuxCare License Agreement CVE-2016-9843 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} - media: rc: fix races with imon_disconnect() {CVE-2025-39993} - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102} - partitions: mac: fix handling of bogus partition table {CVE-2025-21772} - tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277} - Bluetooth: fix use-after-free in device_for_each_child() {CVE-2024-53237} - net/atm: remove the atmdev_ops {get, set}sockopt methods {CVE-2022-50410} - i40e: add validation for ring_len param {CVE-2025-39973} - vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248} - sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259} - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} - isofs: Prevent the use of too small fid {CVE-2025-37780} - net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749} - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() {CVE-2025-39860} - i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853} - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249} - fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304} Important TuxCare License Agreement CVE-2025-21772 CVE-2025-39911 CVE-2025-40304 CVE-2024-53237 CVE-2025-40322 CVE-2025-39853 CVE-2025-39973 CVE-2025-37749 CVE-2025-39860 CVE-2025-38102 CVE-2025-37923 CVE-2025-38724 CVE-2025-37780 CVE-2025-40248 CVE-2025-40277 CVE-2024-58014 CVE-2023-53259 CVE-2025-39993 CVE-2025-38249 CVE-2025-40240 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-12084: fix quadratic algorithm when building nested XML elements with appendChild Moderate TuxCare License Agreement CVE-2025-12084 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Fix CVE-2026-25210: integer overflow in doContent tag buffer reallocation Important TuxCare License Agreement CVE-2026-25210 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Fix CVE-2025-1094: Improper neutralization of quoting syntax in libpq escape functions allowing SQL injection. - Fix CVE-2024-7348: TOCTOU race condition in pg_dump allows arbitrary SQL function execution via view/foreign table replacement. - Fix CVE-2024-10979: Block environment variable mutations from trusted PL/Perl to prevent arbitrary code execution by unprivileged users. - Fix CVE-2025-8714: Restrict psql meta-commands in plain-text dumps to prevent restore-time code injection. Important TuxCare License Agreement CVE-2024-10979 CVE-2025-8714 CVE-2024-7348 CVE-2025-1094 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2018-20685: fix a vulnerability scp client where a malicious server could bypass intended access restrictions and modify target directory permissions via crafted filenames - CVE-2019-6109: fix scp client where a malicious server could manipulate the client's progress display output due to missing character encoding - CVE-2019-6111: fix scp client vulnerability that allowed a malicious server to overwrite arbitrary files in the client's target directory, including subdirectories, when performing transfers Moderate TuxCare License Agreement CVE-2019-6111 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-15366: reject control characters in IMAP commands Important TuxCare License Agreement CVE-2025-15366 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-33526: fix heap use-after-free due to double rfc1738_escape in ICP error handling - CVE-2026-33515: fix validation of ICP packet sizes and URLs to prevent out-of-bounds reads - CVE-2026-32748: fix HttpRequest use-after-free in ICP v3 query handling Low TuxCare License Agreement CVE-2026-33526 CVE-2026-32748 CVE-2026-33515 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-15366: reject control characters in IMAP commands to prevent command injection Important TuxCare License Agreement CVE-2025-15366 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-15367: reject control characters in POP3 commands to prevent command injection via newlines Important TuxCare License Agreement CVE-2025-15367 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} - ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191} - media: imon: reorganize serialization {CVE-2025-39993} - usb: xhci: Fix inverted ring_xrun_event check in handle_tx_event() {CVE-2025-37882} - Revert "VFS: Impose ordering on accesses of d_inode and d_flags" - Revert "VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk" - Revert "namei: d_is_negative() should be checked before ->d_seq validation" - Revert "namei: results of d_is_negative() should be checked after dentry revalidation" - Revert "namei: ->d_inode of a pinned dentry is stable only for positives" - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193} - net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204} - net: add skb_header_pointer_careful() helper {CVE-2026-23204} - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074} Important TuxCare License Agreement CVE-2026-23089 CVE-2026-23204 CVE-2026-23074 CVE-2026-23191 CVE-2024-56570 CVE-2025-68349 CVE-2026-23193 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-11082: fix heap buffer overflow in _bfd_elf_parse_eh_frame - CVE-2025-5244: fix NULL deref in elf_gc_sweep for empty SEC_GROUP - CVE-2025-5245: fix SEGV in debug_type_samep / debug_write_type - CVE-2025-7545: fix heap buffer issue in objcopy copy_section - CVE-2025-7546: fix corrupted group section handling in elf.c Important TuxCare License Agreement CVE-2025-7545 CVE-2025-11082 CVE-2025-5244 CVE-2025-5245 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-45539: reject '#' as part of the URI to prevent ACL bypass via path_end rules Important TuxCare License Agreement CVE-2023-45539 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2017-9233: fix external entity infinite loop in entityValueInitProcessor and entityValueProcessor - CVE-2023-52425: add reparse deferral heuristic to prevent O(n^2) parsing of large tokens in small buffer refills; fix buffer growth calculation - CVE-2013-0340: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) - CVE-2024-28757: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) Important TuxCare License Agreement CVE-2023-52425 CVE-2024-28757 CVE-2013-0340 CVE-2017-9233 cpe:/o:redhat:enterprise_linux:7 /etc/els-release Red Hat Enterprise Linux Server release 7\.9 \(ELS by TuxCare\) 1 wget expat expat-devel expat-static squid squid-migration-script squid-sysvinit python python-debug python-devel python-libs python-test python-tools tkinter binutils binutils-devel krb5-devel krb5-libs krb5-pkinit krb5-server krb5-server-ldap krb5-workstation libkadm5 libxml2 libxml2-devel libxml2-python libxml2-static sudo sudo-devel emacs-git emacs-git-el git git-all git-bzr git-cvs git-daemon git-email git-gnome-keyring git-gui git-hg git-instaweb git-p4 git-svn gitk gitweb perl-Git perl-Git-SVN httpd httpd-devel httpd-manual httpd-tools mod_ldap mod_proxy_html mod_session mod_ssl python3 python3-debug python3-devel python3-idle python3-libs python3-test python3-tkinter php php-bcmath php-cli php-common php-dba php-devel php-embedded php-enchant php-fpm php-gd php-intl php-ldap php-mbstring php-mysql php-mysqlnd php-odbc php-pdo php-pgsql php-process php-pspell php-recode php-snmp php-soap php-xml php-xmlrpc gnutls gnutls-c++ gnutls-dane gnutls-devel gnutls-utils java-1.8.0-openjdk java-1.8.0-openjdk-accessibility java-1.8.0-openjdk-accessibility-debug java-1.8.0-openjdk-debug java-1.8.0-openjdk-demo java-1.8.0-openjdk-demo-debug java-1.8.0-openjdk-devel java-1.8.0-openjdk-devel-debug java-1.8.0-openjdk-headless java-1.8.0-openjdk-headless-debug java-1.8.0-openjdk-javadoc java-1.8.0-openjdk-javadoc-debug java-1.8.0-openjdk-javadoc-zip java-1.8.0-openjdk-javadoc-zip-debug java-1.8.0-openjdk-src java-1.8.0-openjdk-src-debug pam pam-devel openssh openssh-askpass openssh-cavs openssh-clients openssh-keycat openssh-ldap openssh-server openssh-server-sysvinit pam_ssh_agent_auth bpftool kernel kernel-debug kernel-debug-devel kernel-devel kernel-headers kernel-tools kernel-tools-libs kernel-tools-libs-devel perf python-perf cpp gcc gcc-c++ gcc-gfortran gcc-gnat gcc-go gcc-objc gcc-objc++ gcc-plugin-devel libasan libasan-static libatomic libatomic-static libgcc libgfortran libgfortran-static libgnat libgnat-devel libgnat-static libgo libgo-devel libgo-static libgomp libitm libitm-devel libitm-static libmudflap libmudflap-devel libmudflap-static libobjc libquadmath libquadmath-devel libquadmath-static libstdc++ libstdc++-devel libstdc++-docs libstdc++-static libtsan libtsan-static rsync grub2 grub2-common grub2-efi-ia32 grub2-efi-ia32-cdboot grub2-efi-ia32-modules grub2-efi-x64 grub2-efi-x64-cdboot grub2-efi-x64-modules grub2-pc grub2-pc-modules grub2-tools grub2-tools-extra grub2-tools-minimal libsoup libsoup-devel lemon sqlite sqlite-devel sqlite-doc sqlite-tcl mod_dav_svn subversion subversion-devel subversion-gnome subversion-javahl subversion-kde subversion-libs subversion-perl subversion-python subversion-ruby subversion-tools bind bind-chroot bind-devel bind-export-devel bind-export-libs bind-libs bind-libs-lite bind-license bind-lite-devel bind-pkcs11 bind-pkcs11-devel bind-pkcs11-libs bind-pkcs11-utils bind-sdb bind-sdb-chroot bind-utils libxslt libxslt-devel libxslt-python libndp libndp-devel libgudev1 libgudev1-devel systemd systemd-devel systemd-journal-gateway systemd-libs systemd-networkd systemd-python systemd-resolved systemd-sysv freetype freetype-demos freetype-devel iwl100-firmware iwl1000-firmware iwl105-firmware iwl135-firmware iwl2000-firmware iwl2030-firmware iwl3160-firmware iwl3945-firmware iwl4965-firmware iwl5000-firmware iwl5150-firmware iwl6000-firmware iwl6000g2a-firmware iwl6000g2b-firmware iwl6050-firmware iwl7260-firmware linux-firmware tuned tuned-gtk tuned-profiles-atomic tuned-profiles-compat tuned-profiles-cpu-partitioning tuned-profiles-mssql tuned-profiles-nfv tuned-profiles-nfv-guest tuned-profiles-nfv-host tuned-profiles-oracle tuned-profiles-realtime tuned-profiles-sap tuned-profiles-sap-hana tuned-utils tuned-utils-systemtap unbound unbound-devel unbound-libs unbound-python emacs emacs-common emacs-el emacs-filesystem emacs-nox emacs-terminal xorg-x11-server-Xdmx xorg-x11-server-Xephyr xorg-x11-server-Xnest xorg-x11-server-Xorg xorg-x11-server-Xvfb xorg-x11-server-Xwayland xorg-x11-server-common xorg-x11-server-devel xorg-x11-server-source minizip minizip-devel zlib zlib-devel zlib-static mpfr mpfr-devel microcode_ctl gdk-pixbuf2 gdk-pixbuf2-devel gdk-pixbuf2-tests glibc glibc-common glibc-devel glibc-headers glibc-static glibc-utils nscd nettle nettle-devel glib2 glib2-devel glib2-doc glib2-fam glib2-static glib2-tests openssl openssl-devel openssl-libs openssl-perl openssl-static cups cups-client cups-devel cups-filesystem cups-ipptool cups-libs cups-lpd java-11-openjdk java-11-openjdk-debug java-11-openjdk-demo java-11-openjdk-demo-debug java-11-openjdk-devel java-11-openjdk-devel-debug java-11-openjdk-headless java-11-openjdk-headless-debug java-11-openjdk-javadoc java-11-openjdk-javadoc-debug java-11-openjdk-javadoc-zip java-11-openjdk-javadoc-zip-debug java-11-openjdk-jmods java-11-openjdk-jmods-debug java-11-openjdk-src java-11-openjdk-src-debug java-11-openjdk-static-libs java-11-openjdk-static-libs-debug perl perl-CPAN perl-ExtUtils-CBuilder perl-ExtUtils-Embed perl-ExtUtils-Install perl-IO-Zlib perl-Locale-Maketext-Simple perl-Module-CoreList perl-Module-Loaded perl-Object-Accessor perl-Package-Constants perl-Pod-Escapes perl-Time-Piece perl-core perl-devel perl-libs perl-macros perl-tests gnupg2 gnupg2-smime postgresql11 postgresql11-contrib postgresql11-devel postgresql11-docs postgresql11-libs postgresql11-plperl postgresql11-plpython postgresql11-pltcl postgresql11-server postgresql11-server-devel postgresql11-static postgresql11-test postgresql11-test-rpm-macros postgresql11-upgrade postgresql11-upgrade-devel haproxy x86_64 0:1.14-18.el7_6.1.tuxcare.els1 199e2f91fd431d51 d07bf2a08d50eb66 i686|x86_64 0:2.1.0-15.0.1.el7_9.tuxcare.els1 x86_64 7:3.5.20-17.0.3.el7_9.10.tuxcare.els1 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els1 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els1 x86_64 0:2.27-44.base.el7_9.1.tuxcare.els2 i686|x86_64 0:2.27-44.base.el7_9.1.tuxcare.els2 i686|x86_64 0:1.15.1-55.el7_9.tuxcare.els2 x86_64 0:1.15.1-55.el7_9.tuxcare.els2 i686|x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els4 x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els4 x86_64 0:1.8.23-10.el7_9.3.tuxcare.els2 i686|x86_64 0:1.8.23-10.el7_9.3.tuxcare.els2 0:1.8.3.1-25.el7_9.tuxcare.els3 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els3 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els2 0:2.4.6-99.0.5.el7_9.1.tuxcare.els2 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els2 i686|x86_64 0:3.6.8-21.0.1.el7_9.tuxcare.els2 x86_64 0:5.4.16-48.el7.tuxcare.els9 i686|x86_64 0:3.3.29-9.el7_6.tuxcare.els1 x86_64 0:3.3.29-9.el7_6.tuxcare.els1 i686|x86_64 1:1.8.0.452.b09-1.el7_9.tuxcare.els1 1:1.8.0.452.b09-1.el7_9.tuxcare.els1 i686|x86_64 0:1.1.8-23.0.1.el7.tuxcare.els1 x86_64 0:7.4p1-23.0.3.el7_9.tuxcare.els2 i686|x86_64 0:0.10.3-2.23.0.3.el7_9.tuxcare.els2 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[2-9]\d|119)(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[1-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.119.1.el7.tuxcare.els21 x86_64 0:4.8.5-44.0.3.el7.tuxcare.els1 i686|x86_64 0:4.8.5-44.0.3.el7.tuxcare.els1 x86_64 0:3.1.2-12.el7_9.tuxcare.els4 x86_64 1:2.02-0.87.el7_9.14.tuxcare.els1 1:2.02-0.87.el7_9.14.tuxcare.els1 x86_64 0:1.8.23-10.el7_9.3.tuxcare.els3 i686|x86_64 0:1.8.23-10.el7_9.3.tuxcare.els3 i686|x86_64 0:2.62.2-2.0.1.el7.tuxcare.els4 0:1.8.3.1-25.el7_9.tuxcare.els4 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els4 i686|x86_64 0:2.62.2-2.0.1.el7.tuxcare.els5 i686|x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els5 x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els5 x86_64 0:5.4.16-48.el7.tuxcare.els10 x86_64 0:5.4.16-48.el7.tuxcare.els11 i686|x86_64 1:1.8.0.462.b08-1.el7_9.tuxcare.els1 1:1.8.0.462.b08-1.el7_9.tuxcare.els1 x86_64 0:3.7.17-8.el7_7.1.tuxcare.els2 i686|x86_64 0:3.7.17-8.el7_7.1.tuxcare.els2 0:3.7.17-8.el7_7.1.tuxcare.els2 x86_64 0:5.4.16-48.el7.tuxcare.els12 x86_64 0:1.7.14-16.el7.tuxcare.els1 i686|x86_64 0:1.7.14-16.el7.tuxcare.els1 0:1.8.3.1-25.el7_9.tuxcare.els5 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els5 x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els10 i686|x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els10 33:9.11.4-26.P2.el7_9.16.tuxcare.els10 i686|x86_64 0:1.1.28-6.el7.tuxcare.els3 x86_64 0:1.1.28-6.el7.tuxcare.els3 i686|x86_64 0:1.2-9.el7.tuxcare.els1 i686|x86_64 1:219-78.el7_9.9.tuxcare.els2 x86_64 1:219-78.el7_9.9.tuxcare.els2 i686|x86_64 0:2.8-14.el7_9.1.tuxcare.els2 x86_64 0:2.8-14.el7_9.1.tuxcare.els2 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[2-9]\d|119)(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[2-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.119.1.el7.tuxcare.els22 i686|x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els6 x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els6 0:39.31.5.1-83.git78c0348.el7_9.tuxcare.els3 1:39.31.5.1-83.git78c0348.el7_9.tuxcare.els3 0:18.168.6.1-83.git78c0348.el7_9.tuxcare.els3 0:25.30.13.0-83.git78c0348.el7_9.tuxcare.els3 0:15.32.2.9-83.git78c0348.el7_9.tuxcare.els3 0:228.61.2.24-83.git78c0348.el7_9.tuxcare.els3 0:8.83.5.1_1-83.git78c0348.el7_9.tuxcare.els3 0:8.24.2.2-83.git78c0348.el7_9.tuxcare.els3 0:9.221.4.1-83.git78c0348.el7_9.tuxcare.els3 0:41.28.5.1-83.git78c0348.el7_9.tuxcare.els3 0:20200421-83.git78c0348.el7_9.tuxcare.els3 i686|x86_64 0:1.15.1-55.el7_9.99.tuxcare.els3 x86_64 0:1.15.1-55.el7_9.99.tuxcare.els3 0:2.11.0-99.el7_9.tuxcare.els1 x86_64 0:1.6.6-5.el7_8.tuxcare.els3 i686|x86_64 0:1.6.6-5.el7_8.tuxcare.els3 x86_64 1:2.02-0.87.el7_9.14.tuxcare.els2 1:2.02-0.87.el7_9.14.tuxcare.els2 x86_64 1:24.3-23.el7_9.1.tuxcare.els4 1:24.3-23.el7_9.1.tuxcare.els4 x86_64 0:5.4.16-48.el7.tuxcare.els13 x86_64 0:1.20.4-99.el7_9.tuxcare.els1 i686|x86_64 0:1.20.4-99.el7_9.tuxcare.els1 0:1.20.4-99.el7_9.tuxcare.els1 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|13[6-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[3-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.136.1.el7.tuxcare.els23 x86_64 7:3.5.20-17.0.5.el7_9.13.tuxcare.els1 x86_64 7:3.5.20-17.0.5.el7_9.13.tuxcare.els2 i686|x86_64 0:1.2.7-21.el7_9.tuxcare.els2 i686|x86_64 0:3.1.1-4.el7.tuxcare.els1 i686|x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els7 x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els7 x86_64 0:1.20.4-99.el7_9.tuxcare.els4 i686|x86_64 0:1.20.4-99.el7_9.tuxcare.els4 0:1.20.4-99.el7_9.tuxcare.els4 i686|x86_64 0:1.1.8-23.0.1.el7.tuxcare.els2 x86_64 0:1.20.4-99.el7_9.tuxcare.els6 i686|x86_64 0:1.20.4-99.el7_9.tuxcare.els6 0:1.20.4-99.el7_9.tuxcare.els6 x86_64 2:2.1-73.25.el7_9.tuxcare.els1 i686|x86_64 0:2.36.12-3.el7.tuxcare.els1 x86_64 0:2.36.12-3.el7.tuxcare.els1 i686|x86_64 0:2.17-326.el7_9.99.tuxcare.els1 x86_64 0:2.17-326.el7_9.99.tuxcare.els1 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|13[6-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[4-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.136.1.el7.tuxcare.els24 x86_64 7:3.5.20-17.0.5.el7_9.99.tuxcare.els1 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|13[7-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[4-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.137.1.el7.tuxcare.els24 i686|x86_64 0:2.17-326.el7_9.99.tuxcare.els2 x86_64 0:2.17-326.el7_9.99.tuxcare.els2 x86_64 0:5.4.16-48.el7.tuxcare.els14 i686|x86_64 0:2.7.1-9.el7_9.tuxcare.els1 i686|x86_64 0:3.3.29-9.el7_6.tuxcare.els2 x86_64 0:3.3.29-9.el7_6.tuxcare.els2 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els6 0:2.4.6-99.0.5.el7_9.1.tuxcare.els6 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els6 i686|x86_64 0:2.17-326.el7_9.99.tuxcare.els3 x86_64 0:2.17-326.el7_9.99.tuxcare.els3 i686|x86_64 0:2.56.1-9.el7_9.tuxcare.els3 0:2.56.1-9.el7_9.tuxcare.els3 x86_64 0:2.56.1-9.el7_9.tuxcare.els3 x86_64 0:5.4.16-48.el7.tuxcare.els15 0:1.8.3.1-25.el7_9.tuxcare.els6 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els6 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|13[7-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[5-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.137.1.el7.tuxcare.els25 i686|x86_64 0:3.6.8-21.0.1.el7_9.tuxcare.els3 x86_64 1:1.0.2k-26.el7_9.tuxcare.els6 i686|x86_64 1:1.0.2k-26.el7_9.tuxcare.els6 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els1 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|139)(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{2,}|[2-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.139.1.el7.tuxcare.els2 x86_64 1:1.6.3-52.el7_9.tuxcare.els2 i686|x86_64 1:1.6.3-52.el7_9.tuxcare.els2 1:1.6.3-52.el7_9.tuxcare.els2 x86_64 1:1.6.3-52.el7_9.tuxcare.els3 i686|x86_64 1:1.6.3-52.el7_9.tuxcare.els3 1:1.6.3-52.el7_9.tuxcare.els3 x86_64 0:3.1.2-12.0.1.el7_9.tuxcare.els2 i686|x86_64 0:2.62.2-2.0.5.el7.tuxcare.els1 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els2 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els2 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els2 x86_64 7:3.5.20-17.0.5.el7_9.99.tuxcare.els2 i686|x86_64 0:2.62.2-2.0.5.el7.tuxcare.els2 x86_64 0:1.20.4-99.el7_9.tuxcare.els8 i686|x86_64 0:1.20.4-99.el7_9.tuxcare.els8 0:1.20.4-99.el7_9.tuxcare.els8 i686|x86_64 1:1.8.0.472.b08-1.el7_9.tuxcare.els1 1:1.8.0.472.b08-1.el7_9.tuxcare.els1 x86_64 0:1.6.6-5.el7_8.tuxcare.els4 i686|x86_64 0:1.6.6-5.el7_8.tuxcare.els4 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|139)(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{2,}|[3-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.139.1.el7.tuxcare.els3 i686|x86_64 1:11.0.29.0.7-1.el7_9.tuxcare.els1 x86_64 1:11.0.29.0.7-1.el7_9.tuxcare.els1 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|139)(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{2,}|[4-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.139.1.el7.tuxcare.els4 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els7 0:2.4.6-99.0.5.el7_9.1.tuxcare.els7 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els7 0:1.8.3.1-25.el7_9.tuxcare.els7 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els7 0:1.8.3.1-25.el7_9.tuxcare.els8 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els8 x86_64 4:5.16.3-299.el7_9.tuxcare.els1 0:1.9800-299.el7_9.tuxcare.els1 1:0.28.2.6-299.el7_9.tuxcare.els1 0:1.30-299.el7_9.tuxcare.els1 0:1.58-299.el7_9.tuxcare.els1 1:1.10-299.el7_9.tuxcare.els1 1:0.21-299.el7_9.tuxcare.els1 1:2.76.02-299.el7_9.tuxcare.els1 1:0.08-299.el7_9.tuxcare.els1 1:0.42-299.el7_9.tuxcare.els1 1:0.02-299.el7_9.tuxcare.els1 1:1.04-299.el7_9.tuxcare.els1 x86_64 0:1.20.1-299.el7_9.tuxcare.els1 x86_64 0:5.16.3-299.el7_9.tuxcare.els1 i686|x86_64 4:5.16.3-299.el7_9.tuxcare.els1 0:1.8.3.1-25.el7_9.tuxcare.els9 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els9 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[5-9]\d|14[2-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{2,}|[1-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.142.1.el7.tuxcare.els1 x86_64 0:2.0.22-5.el7_5.tuxcare.els1 i686|x86_64 0:2.62.2-2.0.5.el7.tuxcare.els3 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[5-9]\d|14[4-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{2,}|[1-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els1 i686|x86_64 1:1.8.0.482.b03-1.el7_9.tuxcare.els1 1:1.8.0.482.b03-1.el7_9.tuxcare.els1 i686|x86_64 0:2.56.1-9.el7_9.tuxcare.els4 0:2.56.1-9.el7_9.tuxcare.els4 x86_64 0:2.56.1-9.el7_9.tuxcare.els4 i686|x86_64 0:2.1.0-15.0.1.el7_9.tuxcare.els2 x86_64 1:1.0.2k-26.el7_9.tuxcare.els7 i686|x86_64 1:1.0.2k-26.el7_9.tuxcare.els7 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[5-9]\d|14[5-9])(?:\.\d+)*|1160\.144\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.144\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.144\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|[2-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els2 x86_64 1:2.02-0.87.el7_9.14.tuxcare.els4 1:2.02-0.87.el7_9.14.tuxcare.els4 i686|x86_64 0:2.62.2-2.0.5.el7.tuxcare.els4 i686|x86_64 0:2.56.1-9.el7_9.tuxcare.els5 0:2.56.1-9.el7_9.tuxcare.els5 x86_64 0:2.56.1-9.el7_9.tuxcare.els5 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els3 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els3 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els8 0:2.4.6-99.0.5.el7_9.1.tuxcare.els8 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els8 i686|x86_64 0:1.2.7-21.0.1.el7_9.tuxcare.els2 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[5-9]\d|14[5-9])(?:\.\d+)*|1160\.144\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.144\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.144\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|[3-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els3 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els4 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els4 i686|x86_64 0:2.1.0-15.0.1.el7_9.tuxcare.els3 x86_64 0:11.22-1.el7.tuxcare.els2 0:11.22-1.el7.tuxcare.els2 x86_64 0:7.4p1-23.0.3.el7_9.tuxcare.els3 i686|x86_64 0:0.10.3-2.23.0.3.el7_9.tuxcare.els3 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els5 x86_64 7:3.5.20-17.0.5.el7_9.99.tuxcare.els4 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els5 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els5 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els6 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els6 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[5-9]\d|14[5-9])(?:\.\d+)*|1160\.144\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.144\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.144\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|[4-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els4 x86_64 0:2.27-44.base.el7_9.1.tuxcare.els4 i686|x86_64 0:2.27-44.base.el7_9.1.tuxcare.els4 x86_64 0:1.5.18-9.el7_9.1.tuxcare.els1 i686|x86_64 0:2.1.0-15.0.7.el7_9.tuxcare.els1