Tuxcare Errata System 0.0.1 5.10 2026-03-10T14:34:07 Community Enterprise Operating System 8 - CVE-2023-4863: fix OOB write in BuildHuffmanTable Important TuxCare License Agreement CVE-2023-4863 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-32002: fix submodule paths to not contain symlinks Critical TuxCare License Agreement CVE-2024-32002 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-25062: Fix use-after-free issue in XML Reader interface Important TuxCare License Agreement CVE-2024-25062 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u412-b08. That fixes following CVEs: - CVE-2024-21011: Long Exception message leading to crash - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: C2 compilation fails with "Exceeded _node_regs array" Important TuxCare License Agreement CVE-2024-20952 CVE-2024-20918 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-2961: fix buffer overflow issue in iconv() function when converting strings to ISO-2022-CN-EXT character set - CVE-2024-33599: fix buffer overflow in netgroup cache Important TuxCare License Agreement CVE-2024-2961 CVE-2024-33599 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update iwlwifi firmware to mitigate CVE-2022-38076 for wifi adapters: Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461 Important TuxCare License Agreement CVE-2022-38076 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-32004: add tests for cloning from partial repo, fetch/clone: detect dubious ownership of local repositories - CVE-2024-32465: upload-pack: disable lazy-fetching by default Important TuxCare License Agreement CVE-2024-32465 CVE-2024-32004 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference Important TuxCare License Agreement CVE-2023-2953 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-0450: add detection of "quoted-overlap" zip-bombs in zipfile module Moderate TuxCare License Agreement CVE-2024-0450 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-38428: properly re-implement userinfo parsing (rfc2396) - Fix wget Test-proxied-https-auth.px and Test-proxied-https-auth.px tests failing - Providing wget -O and -q parameters while running in background generates a wget-log file Critical TuxCare License Agreement CVE-2024-38428 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE) Important TuxCare License Agreement CVE-2024-21147 CVE-2024-21145 CVE-2024-21144 CVE-2024-21138 CVE-2024-21131 CVE-2024-21140 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Fix package version number - Use CloudLinux vendor cert - Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel - Add patches from centos-8.5 ELS: - CVE-2021-3695: out-of-bounds write in the heap area by a crafted 16-bit grayscale PNG image - CVE-2021-3696: a heap out-of-bounds during the handling of Huffman tables in the PNG reader - CVE-2021-3697: allowing user-controlled data to be written in heap by a crafted JPEG image - CVE-2022-2601: possible circumventing of the secure boot mechanism by a malicious crafted pf2 font - CVE-2022-28733: possible write past the end of the buffer because of integer underflow in grub_net_recv_ip4_packets() - CVE-2022-28734: out-of-bounds write when handling split HTTP headers - CVE-2022-28736: use-after-free vulnerability in grub_cmd_chainloader() - CVE-2022-3775: out-of-bounds write into grub2’s heap because of lack of proper validation of glyph’s width and height - CVE-2023-4692: out-of-bounds write in grub2’s NTFS filesystem driver - The following CVEs were fixed by previous patches additionally: - CVE-2020-15706: a race condition in grub_script_function_create() leading to a use-after-free vulnerability - CVE-2020-15707: integer overflows in efilinux leading to a heap-based buffer overflow - A number of upstream fixes backported including: - CVE-2024-1048: a flaw that may result in filesystem running out of free inodes or blocks Important TuxCare License Agreement CVE-2022-28736 CVE-2021-3981 CVE-2022-3775 CVE-2022-2601 CVE-2022-28734 CVE-2022-28733 CVE-2021-3697 CVE-2021-3696 CVE-2021-3695 CVE-2020-15707 CVE-2024-1048 CVE-2020-15706 CVE-2023-4692 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel - Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551 Important TuxCare License Agreement CVE-2023-40547 CVE-2023-40551 CVE-2023-40550 CVE-2023-40549 CVE-2023-40548 CVE-2023-40546 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2023-38709: http_filters: HTTP response splitting - CVE-2024-38473: mod_proxy: server proxy encoding problem - CVE-2024-39573: mod_rewrite: proxy handler substitution - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix Critical TuxCare License Agreement CVE-2024-39573 CVE-2024-39884 CVE-2024-38475 CVE-2024-38477 CVE-2024-38473 CVE-2024-38474 CVE-2023-38709 CVE-2024-40725 CVE-2024-38476 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-2398: fix memory leak when aborting server push due to exceeding header limit Important TuxCare License Agreement CVE-2024-2398 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570} - gfs2: Remove ill-placed consistency check {CVE-2024-38570} - gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570} - wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225} - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161} - drm/amdgpu/mes: fix use-after-free issue {CVE-2024-38581} - drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free {CVE-2024-36979} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - ima: define ima_max_digest_data struct without a flexible array variable - ima: detect changes to the backing overlay file - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956} - drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471} - net/sched: flower: Fix chain template offload {CVE-2024-26669} - userfaultfd: fix a race between writeprotect and exit_mmap() {CVE-2021-47461} - scsi: mpi3mr: Sanitise num_phys {CVE-2024-42159} - ata: libata-core: Fix double free on error {CVE-2024-41087} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904} - tipc: fix UAF in error path {CVE-2024-36886} - net: fix out-of-bounds access in ops_init {CVE-2024-36883} - tap: add missing verification for short frame {CVE-2024-41090} - tun: add missing verification for short frame {CVE-2024-41091} - netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path {CVE-2024-26925} - netfilter: nf_tables: discard table flag update with pending basechain deletion {CVE-2024-26925} - netfilter: nf_tables: reject table flag and netdev basechain updates {CVE-2024-26925} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852} - sched/psi: Fix use-after-free in ep_remove_wait_queue() {CVE-2023-52707} - wait: add wake_up_pollfree() {CVE-2023-52707} - tcp_metrics: validate source addr length {CVE-2024-42154} Critical TuxCare License Agreement CVE-2024-39494 CVE-2024-42225 CVE-2024-38581 CVE-2024-42228 CVE-2024-40956 CVE-2024-39471 CVE-2024-38552 CVE-2024-38555 CVE-2024-42161 CVE-2024-42154 CVE-2024-42159 CVE-2024-38570 CVE-2024-36883 CVE-2024-26852 CVE-2024-36886 CVE-2023-52707 CVE-2024-36904 CVE-2024-41087 CVE-2024-41091 CVE-2024-41090 CVE-2024-27397 CVE-2024-36978 CVE-2024-26925 CVE-2024-26923 CVE-2024-26668 CVE-2024-36979 CVE-2024-38538 CVE-2024-36960 CVE-2024-26669 CVE-2021-47461 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - The release version was raised because it corresponds to version 13 - CVE-2024-45490: reject negative len for XML_ParseBuffer to prevent improper restriction of XML External Entity Reference - CVE-2024-45491: prevent integer overflow in dtdCopy - CVE-2024-45492: prevent integer overflow in nextScaffoldPart Critical TuxCare License Agreement CVE-2024-45492 CVE-2024-45491 CVE-2024-45490 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-1975: Remove support for SIG(0) message verification Important TuxCare License Agreement CVE-2024-1975 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-1737-1: introduced new configurable limits that prevent the loading (into zones or into cache) of DNS resource records (RRs) that exceed them - CVE-2024-1737-2: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES. Add masterformat tests for testing RRsets. Fix limits tests - CVE-2023-2828-fixup: do not use header_prev in expire_lru_headers Important TuxCare License Agreement CVE-2024-1737 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - firmware: cs_dsp: Return error if block header overflows file {CVE-2024-42238} - scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124} - ftruncate: pass a signed offset {CVE-2024-42084} - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files {CVE-2024-41056} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035} - xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014} - netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005} - drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988} - ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING {CVE-2024-36920} - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms {CVE-2024-35989} - udp: do not accept non-tunnel GSO skbs landing in a tunnel {CVE-2024-35884} - nvme-fc: do not wait in vain when unloading module {CVE-2024-26846} - drm/amdgpu: Fix the null pointer when load rlc firmware {CVE-2024-26649} - Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840} - wifi: ath11k: fix htt pktlog locking {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking {CVE-2023-52798} - ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683} - ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478} - USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760} - phylib: fix potential use-after-free {CVE-2022-48754} - serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - mlxsw: thermal: Fix out-of-bounds memory accesses {CVE-2021-47441} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs {CVE-2021-47393} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47384} - virtio-net: Add validation for used length {CVE-2021-47352} - fbmem: Do not delete the mode that is still in use {CVE-2021-47338} - watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321} - ACPI: fix NULL pointer dereference {CVE-2021-47289} - driver core: auxiliary bus: Fix memory leak when driver_register() fail {CVE-2021-47287} - Input: elantech - fix stack out of bound access in elantech_change_report_id() {CVE-2021-47097} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts {CVE-2022-48866} - ipv6: prevent possible NULL dereference in rt6_probe() {CVE-2024-40960} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() {CVE-2024-40959} - wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941} - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station {CVE-2024-40911} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages {CVE-2024-40904} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet {CVE-2024-39506} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - crypto: bcm - Fix pointer arithmetic {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated {CVE-2024-38559} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 {CVE-2024-38558} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). {CVE-2024-37356} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up {CVE-2024-36952} - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() {CVE-2024-36924} - wifi: iwlwifi: read txq->read_ptr under lock {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload {CVE-2024-36919} - netfilter: complete validation of user input {CVE-2024-35962} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() {CVE-2024-35944} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() {CVE-2024-26894} - dm: call the resume method on internal suspend {CVE-2024-26880} - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again {CVE-2024-26720} - tracing: Ensure visibility when inserting an element into tracing_map {CVE-2024-26645} - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() {CVE-2023-52809} - perf/x86/lbr: Filter vsyscall addresses {CVE-2023-52476} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() {CVE-2023-52470} - Input: add bounds checking to input_set_capability() {CVE-2022-48619} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - net: do not leave a dangling sk pointer, when socket creation fails {CVE-2024-40954} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - net/sched: Fix UAF when resolving a clash {CVE-2024-41040} - PCI/MSI: Fix UAF in msi_capability_init {CVE-2024-41096} Important TuxCare License Agreement CVE-2024-40911 CVE-2024-26645 CVE-2024-38579 CVE-2021-47097 CVE-2021-47287 CVE-2021-47321 CVE-2021-47393 CVE-2021-47441 CVE-2021-47497 CVE-2023-52478 CVE-2023-52605 CVE-2023-52683 CVE-2023-52798 CVE-2024-35989 CVE-2024-41038 CVE-2024-41056 CVE-2024-36919 CVE-2024-41040 CVE-2024-26614 CVE-2024-40941 CVE-2024-40912 CVE-2024-35962 CVE-2021-47352 CVE-2021-47289 CVE-2024-40988 CVE-2024-42124 CVE-2024-42148 CVE-2024-40960 CVE-2024-41096 CVE-2024-36952 CVE-2024-26880 CVE-2024-40959 CVE-2024-43900 CVE-2024-42238 CVE-2024-41014 CVE-2024-41005 CVE-2024-36920 CVE-2024-35884 CVE-2024-26846 CVE-2024-26649 CVE-2023-52840 CVE-2023-52800 CVE-2022-48866 CVE-2022-48760 CVE-2022-48754 CVE-2021-47527 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47338 CVE-2024-39499 CVE-2024-41035 CVE-2024-40901 CVE-2024-42084 CVE-2024-35944 CVE-2024-26894 CVE-2023-52470 CVE-2022-48619 CVE-2024-44940 CVE-2024-39506 CVE-2024-38559 CVE-2024-40929 CVE-2024-26855 CVE-2021-47383 CVE-2024-38558 CVE-2023-52809 CVE-2024-26720 CVE-2023-52476 CVE-2024-36922 CVE-2024-37356 CVE-2024-40954 CVE-2024-36924 CVE-2024-40904 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-7071: fix URL validation with functions like filter_var($url, FILTER_VALIDATE_URL) - CVE-2021-21705: fix URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter when an URL with invalid password field can be accepted as valid - CVE-2024-5458: fix early-out for ipv6 hostname validation, ensure full check is performed Moderate TuxCare License Agreement CVE-2021-21705 CVE-2024-5458 CVE-2020-7071 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-7592: fix quadratic complexity in parsing cookies with backslashes Important TuxCare License Agreement CVE-2024-7592 CVE-2024-6232 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 - Update AMD CPU microcode to 2024-08-11 - Fix license info Important TuxCare License Agreement CVE-2023-31315 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-27316: Limit buffering of HTTP/2 incoming headers to prevent memory exhaustion Important TuxCare License Agreement CVE-2024-27316 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - drm/amdgpu: Validate TA binary size {CVE-2024-44977} - drm/amd/display: Avoid overflow from uint32_t to uint8_t {CVE-2024-47661} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info {CVE-2024-46842} - ALSA: line6: Fix racy access to midibuf {CVE-2024-44954} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - drm/amdgpu/mes: fix mes ring buffer overflow {CVE-2024-46700} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722} - ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588} - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() {CVE-2024-38588} - ftrace: Store the order of pages allocated in ftrace_page {CVE-2024-38588} - ftrace: Check if pages were allocated before calling free_pages() {CVE-2024-38588} - x86/ibt,ftrace: Search for __fentry__ location {CVE-2024-38588} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - Squashfs: sanity check symbolic link size {CVE-2024-46744} - drm/amd/pm: Fix negative array index read {CVE-2024-46821} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - KVM: x86: do not set st->preempted when going back to user space {CVE-2022-39189} - net: Return errno in sk->sk_prot->get_port(). {CVE-2023-0461} - drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box {CVE-2024-46811} - ext4: do not create EA inode under buffer lock {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() {CVE-2024-40972} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() {CVE-2024-40972} - nvme: avoid double free special payload {CVE-2024-41073} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL {CVE-2023-52817} - wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - parport: Standardize use of printmode {CVE-2024-42301} - parport: Convert printk(KERN_<LEVEL> to pr_<level> {CVE-2024-42301} - parport: parport_pc: Mark expected switch fall-through {CVE-2024-42301} - protect the fetch of ->fd[fd] in do_dup2() from mispredictions {CVE-2024-42265} - leds: trigger: Unregister sysfs attributes before calling deactivate() {CVE-2024-43830} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - HID: amd_sfh: free driver_data after destroying hid device {CVE-2024-46746} - hwmon: (adc128d818) Fix underflows seen when writing limit attributes {CVE-2024-46759} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - netns: Make get_net_ns() handle zero refcount net {CVE-2024-40958} - net: make get_net_ns return error if NET_NS is disabled {CVE-2024-40958} - mm, slub: fix potential memoryleak in kmem_cache_open() {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure {CVE-2021-47466} - tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665} - xfs: don't walk off the end of a directory data block {CVE-2024-42084} - firmware: cs_dsp: Fix overflow checking of wmfw header {CVE-2024-41039} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} Important TuxCare License Agreement CVE-2023-52817 CVE-2021-47466 CVE-2024-46759 CVE-2024-46725 CVE-2024-46821 CVE-2024-42265 CVE-2024-46813 CVE-2024-44987 CVE-2024-40972 CVE-2024-44954 CVE-2024-46746 CVE-2024-46700 CVE-2024-43882 CVE-2024-40958 CVE-2024-46758 CVE-2024-43830 CVE-2024-42284 CVE-2024-46842 CVE-2024-47661 CVE-2024-44977 CVE-2024-46811 CVE-2022-39189 CVE-2024-46818 CVE-2024-46744 CVE-2024-46756 CVE-2024-46731 CVE-2024-46757 CVE-2024-41039 CVE-2024-26665 CVE-2024-46724 CVE-2024-46800 CVE-2024-46723 CVE-2024-46722 CVE-2024-46673 CVE-2024-42285 CVE-2024-41071 CVE-2024-42301 CVE-2024-42280 CVE-2024-41073 CVE-2024-38588 CVE-2024-46738 CVE-2023-0461 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data boundaries larger than the read buffer Important TuxCare License Agreement CVE-2024-8925 CVE-2024-8927 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-4408: speed up parsing of DNS messages with many different names - fix tests Important TuxCare License Agreement CVE-2023-4408 CVE-2023-50868 CVE-2023-50387 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to shenandoah-jdk8u432-b06 fixing the following CVEs: - CVE-2024-21208: unauthorized partial DoS vulnerability - CVE-2024-21210: unauthorized update, insert, or delete access to some of data - CVE-2024-21217: unauthorized partial DoS vulnerability - CVE-2024-21235: unauthorized update, insert, delete, or read access to some of data - Update the PR3533 patch Moderate TuxCare License Agreement CVE-2024-21235 CVE-2024-21217 CVE-2024-21210 CVE-2024-21208 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Fix CVE-2023-45539: fix potential information disclosure by not accepting '#' as a part of the URI component Important TuxCare License Agreement CVE-2023-45539 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2019-12900: accept as many selectors as the file format allows but ignore any larger than the theoretical maximum, BZ_MAX_SELECTORS Critical TuxCare License Agreement CVE-2019-12900 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-5535: Validate provided client list in ssl/ssl_lib.c. Clarify SSL_select_next_proto documentation Moderate TuxCare License Agreement CVE-2024-5535 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884} - mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX {CVE-2024-46871} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit {CVE-2024-49950} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - padata: Fix possible divide-by-0 panic in padata_mt_helper() {CVE-2024-43889} - wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930} - net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698} - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029} - tipc: guard against string buffer overrun {CVE-2024-49995} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883} - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error {CVE-2024-47697} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - net: delete "register" keyword {CVE-2024-50033} - drm/amd/display: fix double free issue during amdgpu module unload {CVE-2024-49989} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969} - drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092} - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change {CVE-2021-47624} Critical TuxCare License Agreement CVE-2024-47685 CVE-2022-49014 CVE-2022-49029 CVE-2024-49967 CVE-2024-49894 CVE-2024-49995 CVE-2024-49989 CVE-2024-46871 CVE-2024-47697 CVE-2021-47624 CVE-2024-47701 CVE-2024-49884 CVE-2024-49950 CVE-2024-49930 CVE-2024-50073 CVE-2024-50055 CVE-2024-49889 CVE-2024-50035 CVE-2024-49960 CVE-2024-49895 CVE-2024-41092 CVE-2024-49969 CVE-2024-43889 CVE-2024-49860 CVE-2024-47698 CVE-2024-49882 CVE-2024-49883 CVE-2024-50033 CVE-2024-47745 CVE-2024-49991 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-50602: Fix crash in XML_ResumeParser function by preventing XML_StopParser from stopping/suspending unstarted parser Moderate TuxCare License Agreement CVE-2024-50602 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2018-12699: Fix heap-based buffer overflow, oom, and stack overflow issues. Critical TuxCare License Agreement CVE-2018-12699 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-45802: Fix DoS by a trusted server by disabling ESI Important TuxCare License Agreement CVE-2024-45802 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-10963: fix a flaw found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. There is the new 'nodns' option which should be enabled to fix the CVE. Important TuxCare License Agreement CVE-2024-10963 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-11233: Fix buffer overflow vulnerability in convert.quoted-printable-decode filter; fix bug #74267 Important TuxCare License Agreement CVE-2024-11233 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-3824: Update length checking in PHAR directory entries reading to prevent stack buffer overflow and potential memory corruption or RCE Critical TuxCare License Agreement CVE-2023-3824 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing Important TuxCare License Agreement CVE-2023-3823 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-0568: fix array overrun when appending slash to paths Important TuxCare License Agreement CVE-2023-0568 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-23638: Do not update StoreEntry expiration after errorAppendEntry() Moderate TuxCare License Agreement CVE-2024-23638 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-11234: fix HTTP fulluri CRLF injection Important TuxCare License Agreement CVE-2024-11234 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-31629: Add cookie integrity validation - CVE-2024-2756: Fix issue introduced by incomplete fix of CVE-2022-31629 to prevent network and same-site attackers from setting insecure cookies in victim's browser - CVE-2024-3096: Fix issue where password_verify() incorrectly returns true when testing a blank string with password starting with a null byte Moderate TuxCare License Agreement CVE-2024-2756 CVE-2024-3096 CVE-2022-31629 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-0567: fix issue causing password_verify() function to accept invalid Blowfish hashes as valid - CVE-2023-3247: fix issue with SOAP HTTP Digest Authentication random value generator not checking for failure, leading to disclosure of uninitialized memory and easier guessing of client's nonce - Fix SOAP leaking http_msg on error Moderate TuxCare License Agreement CVE-2023-3247 CVE-2023-0567 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - media: edia: dvbdev: fix a use-after-free {CVE-2024-27043} - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans {CVE-2024-50264} - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057} - bpf: Fix out-of-bounds write in trie_get_next_key() {CVE-2024-50262} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - smb: client: fix UAF in async decryption {CVE-2024-50047} - cifs: Adjust key sizes and key generation routines for AES256 encryption {CVE-2024-50047} - smb3: rename encryption/decryption TFMs {CVE-2024-50047} - uprobe: avoid out-of-bounds memory access of fetching args {CVE-2024-50067} - net: do not delay dst_entries_add() in dst_release() {CVE-2024-50036} - mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858} - firmware_loader: Block path traversal {CVE-2024-47742} Important TuxCare License Agreement CVE-2024-50264 CVE-2024-50262 CVE-2024-50115 CVE-2024-47742 CVE-2024-46858 CVE-2024-53057 CVE-2024-50047 CVE-2024-50036 CVE-2024-50067 CVE-2024-27043 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-12085: prevent leak of uninitialised stack data in hash_search Important TuxCare License Agreement CVE-2024-12085 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-12747: fix symlink race conditions Moderate TuxCare License Agreement CVE-2024-12747 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - xsk: fix OOB map writes when deleting elements {CVE-2024-56614} - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103} - scsi: sg: Fix slab-use-after-free read in sg_release() {CVE-2024-56631} - net: inet: do not leave a dangling sk pointer in inet_create() {CVE-2024-56601} - initramfs: avoid filename buffer overrun {CVE-2024-53142} - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156} - ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150} - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604} - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605} - af_packet: avoid erroring out after sock_init_data() in packet_create() {CVE-2024-56606} - af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET {CVE-2024-56606} - scsi: bfa: Fix use-after-free in bfad_im_module_exit() {CVE-2024-53227} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() {CVE-2024-56602} - net: inet6: do not leave a dangling sk pointer in inet6_create() {CVE-2024-56600} - NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173} - net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603} - ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689} - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' {CVE-2024-56608} - netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141} - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). {CVE-2024-27043} - smb: client: fix potential UAF in cifs_stats_proc_write() {CVE-2024-35868} - smb: client: fix potential UAF in cifs_stats_proc_show() {CVE-2024-35867} - smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864} - smb: client: fix potential UAF in smb2_is_valid_oplock_break() {CVE-2024-35863} - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() {CVE-2024-35861} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - smb: client: fix potential UAF in cifs_debug_files_proc_show() {CVE-2024-26928} Important TuxCare License Agreement CVE-2024-56614 CVE-2024-56604 CVE-2024-53150 CVE-2024-56606 CVE-2024-53141 CVE-2023-52752 CVE-2024-26689 CVE-2024-53142 CVE-2024-53227 CVE-2024-56603 CVE-2024-56602 CVE-2024-56600 CVE-2024-56601 CVE-2024-56605 CVE-2024-53156 CVE-2024-53103 CVE-2024-56631 CVE-2024-53173 CVE-2024-35867 CVE-2024-35863 CVE-2024-26928 CVE-2024-27043 CVE-2024-35868 CVE-2024-35861 CVE-2024-35864 CVE-2024-56608 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-12086: fix infoleak when connect to malicious server - CVE-2024-12088: properly verify if a symbolic link destination contains another symbolic link within it when using the '--safe-links' option Moderate TuxCare License Agreement CVE-2024-12086 CVE-2024-12087 CVE-2024-12088 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd - Modify spec and run-tests.php to fix extension loading during testing Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update AMD SEV CPU firmware to address CVE-2023-31356, CVE-2023-20584 Moderate TuxCare License Agreement CVE-2023-20584 CVE-2023-31356 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format {CVE-2024-53104} - ALSA: 6fire: Release resources at card release {CVE-2024-53239} - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() {CVE-2024-50282} - bpf: fix OOB devmap writes when deleting elements {CVE-2024-56615} - ELF: fix kernel.randomize_va_space double read {CVE-2024-46826} Important TuxCare License Agreement CVE-2024-56615 CVE-2024-53104 CVE-2024-53239 CVE-2024-50282 CVE-2024-46826 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559 - Rebase mysql-mtr.patch - Remove mysql-fix-includes-robin-hood.patch - Rebase mysql-increase-wait-until-connect-timeout.patch Critical TuxCare License Agreement CVE-2025-21520 CVE-2025-21540 CVE-2024-21212 CVE-2025-21555 CVE-2024-21198 CVE-2025-21543 CVE-2025-21518 CVE-2025-21490 CVE-2025-21522 CVE-2025-21494 CVE-2024-21230 CVE-2025-21505 CVE-2024-7264 CVE-2024-11053 CVE-2024-21241 CVE-2024-21194 CVE-2024-5535 CVE-2024-21238 CVE-2025-21525 CVE-2025-21521 CVE-2025-21531 CVE-2025-21546 CVE-2024-21203 CVE-2024-21239 CVE-2024-21196 CVE-2025-21523 CVE-2025-21559 CVE-2025-21504 CVE-2025-21529 CVE-2025-21519 CVE-2025-21536 CVE-2024-21247 CVE-2024-21231 CVE-2025-21503 CVE-2024-37371 CVE-2024-21193 CVE-2025-21501 CVE-2024-21199 CVE-2025-21500 CVE-2025-21497 CVE-2025-21491 CVE-2025-21534 CVE-2024-21237 CVE-2024-21213 CVE-2024-21197 CVE-2024-21236 CVE-2024-21201 CVE-2024-21218 CVE-2024-21219 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-11187: limit additional section record while queries processing to prevent CPU exhaustion Important TuxCare License Agreement CVE-2024-11187 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-27113: fix compilation of explicit child axis Important TuxCare License Agreement CVE-2025-27113 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-47175: fix improper input validation in cups for PPD files Important TuxCare License Agreement CVE-2024-47175 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-0840: fix stack-buffer-overflow at objdump disassemble_bytes Important TuxCare License Agreement CVE-2025-0840 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c - CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c Important TuxCare License Agreement CVE-2024-56171 CVE-2025-24928 Community Enterprise Operating System 8 - USB: serial: io_edgeport: fix use after free in debug printk {CVE-2024-50267} - HID: core: zero-initialize the report buffer {CVE-2024-50302} - dm cache: fix potential out-of-bounds access on the first resume {CVE-2024-50278} - dm cache: fix out-of-bounds access to the dirty bitset when resizing {CVE-2024-50278} - wifi: iwlegacy: Clear stale interrupts before resuming device {CVE-2024-50234} - security/keys: fix slab-out-of-bounds in key_task_permission {CVE-2024-50301} - udf: fix uninit-value use in udf_get_fileshortad {CVE-2024-50143} - overflow: Allow mixed type arguments {CVE-2024-50143} - compiler.h: drop fallback overflow checkers {CVE-2024-50143} - overflow: Add __must_check attribute to check_*() helpers {CVE-2024-50143} - mptcp: fix double-free on socket dismantle {CVE-2024-26782} - drm/amdgpu: fix usage slab after free {CVE-2024-56551} - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() {CVE-2024-57798} - drm/dp_mst: Skip CSN if topology probing is not done yet {CVE-2024-57798} Important TuxCare License Agreement CVE-2024-50302 CVE-2024-26782 CVE-2024-50234 CVE-2024-50301 CVE-2024-56551 CVE-2024-50143 CVE-2024-57798 CVE-2024-50267 CVE-2024-50278 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-26465: fix vulnerability in OpenSSH when the VerifyHostKeyDNS option is enabled Moderate TuxCare License Agreement CVE-2025-26465 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2022-49043: fix use-after-free vulnerability in xmlXIncludeAddNode Moderate TuxCare License Agreement CVE-2022-49043 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write Important TuxCare License Agreement CVE-2025-0690 CVE-2024-45776 CVE-2025-0678 CVE-2024-45780 CVE-2024-45775 CVE-2025-1118 CVE-2025-1125 CVE-2024-45783 CVE-2024-45777 CVE-2024-45782 CVE-2025-0622 CVE-2025-0624 CVE-2024-45774 CVE-2024-56737 CVE-2024-45781 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-11023: Fix issue where untrusted HTML containing <option> elements could execute untrusted code in DOM manipulation methods Moderate TuxCare License Agreement CVE-2020-11023 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to shenandoah-jdk8u452-b09 fixing the following CVEs: - CVE-2025-21587: better TLS connection support - CVE-2025-30691: improve compiler transformations - CVE-2025-30698: enhance Buffered Image handling Important TuxCare License Agreement CVE-2025-30698 CVE-2025-30691 CVE-2025-21587 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-8176: fix stack overflow vulnerability when parsing deeply nested entity references Important TuxCare License Agreement CVE-2024-8176 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-32415: fix heap-based buffer under-read in xmlSchemaIDCFillNodeTables Important TuxCare License Agreement CVE-2025-32414 CVE-2025-32415 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-1736: add checking of http user header crlf Moderate TuxCare License Agreement CVE-2025-1217 CVE-2025-1734 CVE-2025-1736 CVE-2025-1861 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Fix CVE-2024-12133: improve handling of specific certificate data Moderate TuxCare License Agreement CVE-2024-12133 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - media: uvcvideo: Fix double free in error path {CVE-2024-57980} - vrf: use RCU protection in l3mdev_l3_out() {CVE-2025-21791} - geneve: Fix use-after-free in geneve_find_dev(). {CVE-2025-21858} - ibmvnic: Don't reference skb after sending to VIOS {CVE-2025-21855} - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() {CVE-2025-21993} - vlan: enforce underlying device type {CVE-2025-21920} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928} - can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922} - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices {CVE-2024-53197} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg {CVE-2023-31436} - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). {CVE-2024-50154} - net: defer final 'struct net' free in netns dismantle {CVE-2024-56658} - smb: client: fix use-after-free of signing key {CVE-2024-53179} - gso: do not skip outer ip header in case of ipip and net_failover {CVE-2022-48936} Important TuxCare License Agreement CVE-2023-31436 CVE-2022-48936 CVE-2025-21920 CVE-2024-56658 CVE-2025-21993 CVE-2023-52922 CVE-2024-53197 CVE-2025-21858 CVE-2025-21702 CVE-2025-21928 CVE-2024-50154 CVE-2024-53179 CVE-2025-21791 CVE-2024-57980 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-12243: x509: optimize name constraints processing Moderate TuxCare License Agreement CVE-2024-12243 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update to MySQL 8.0.42 - CVEs fixed: CVE-2025-21574 CVE-2025-21577 CVE-2025-21579 CVE-2025-21581 CVE-2025-21584 CVE-2025-21585 CVE-2025-30681 CVE-2025-30682 CVE-2025-30683 CVE-2025-30684 CVE-2025-30688 CVE-2025-30689 CVE-2025-30695 CVE-2025-30696 CVE-2025-30699 CVE-2025-30703 CVE-2025-30705 CVE-2025-30715 CVE-2025-30715 CVE-2025-30721 CVE-2025-30722 Moderate TuxCare License Agreement CVE-2025-21577 CVE-2025-30703 CVE-2025-30695 CVE-2025-30681 CVE-2025-30683 CVE-2025-30710 CVE-2025-30682 CVE-2025-30715 CVE-2025-30699 CVE-2025-30688 CVE-2025-30696 CVE-2025-30689 CVE-2025-21574 CVE-2025-30721 CVE-2025-30722 CVE-2025-21581 CVE-2025-21585 CVE-2025-21579 CVE-2025-21584 CVE-2025-30684 CVE-2025-30705 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-32728: fix logic error in DisableForwarding option Low TuxCare License Agreement CVE-2025-32728 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-52005: add sideband.allowControlCharacters config which gives a possibility to avoid control characters in sideband Important TuxCare License Agreement CVE-2024-52005 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2016-9840: fix improper pointer arithmetic in bundled zlib Important TuxCare License Agreement CVE-2016-9840 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-16156: fix signature verification bypass Important TuxCare License Agreement CVE-2020-16156 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-4802: fix untrusted LD_LIBRARY_PATH vulnerability in dynamically shared library loading in setuid binaries to prevent attacker control Important TuxCare License Agreement CVE-2024-33600 CVE-2024-33601 CVE-2024-33602 CVE-2025-4802 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-7264: fix out-of-bound read in GTime2str() function Moderate TuxCare License Agreement CVE-2024-7264 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-13176: fix timing side-channel in ECDSA signature computation Moderate TuxCare License Agreement CVE-2024-13176 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-32462: fix Local Privilege Escalation vulnerability via host option Important TuxCare License Agreement CVE-2025-32462 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-48385: bundle-uri: fix arbitrary file writes via parameter injection Important TuxCare License Agreement CVE-2025-48384 CVE-2025-48385 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-49794: fix use-after-free issue triggered by processing certain <sch:name path="..."/> elements in input XML file. - CVE-2025-49796: fix memory corruption issue triggered by processing certain sch:name elements from input XML file - CVE-2025-6021: fix integer overflow in buffer size calculations to prevent stack-based buffer overflow Critical TuxCare License Agreement CVE-2025-49796 CVE-2025-49794 CVE-2025-6021 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions - Perform regression testing Important TuxCare License Agreement CVE-2025-6020 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-52533: gsocks4aproxy: fix a single byte buffer overflow in connect messages - Enable tests during build - Fix test failure in gdatetime Important TuxCare License Agreement CVE-2024-52533 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() {CVE-2022-49846} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set {CVE-2022-49136} - Bluetooth: Fix use after free in hci_send_acl {CVE-2022-49111} - NFSv4/pnfs: Fix a use-after-free bug in open {CVE-2022-50072} - NFSv4: Don't hold the layoutget locks across multiple RPC calls {CVE-2022-50072} - ndisc: use RCU protection in ndisc_alloc_skb() {CVE-2025-21764} - cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919} - udmabuf: fix a buf size overflow issue during udmabuf creation {CVE-2025-37803} - um: Fix out-of-bounds read in LDT setup {CVE-2022-49395} - rtw89: cfo: check mac_id to avoid out-of-bounds {CVE-2022-49471} - vsock: Keep the binding until socket destruction {CVE-2025-21756} - net/mlx5: Always stop health timer during driver removal {CVE-2024-40906} - ext4: fix OOB read when checking dotdot dir {CVE-2025-37785} - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd {CVE-2025-21969} - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() {CVE-2025-21780} - drm: nv04: Fix out of bounds access {CVE-2024-27008} - parport: Proper fix for array out-of-bounds access {CVE-2024-50074} - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} - net: make sock_inuse_add() available {CVE-2024-53168} - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() {CVE-2023-52921} Important TuxCare License Agreement CVE-2023-52921 CVE-2022-49846 CVE-2022-49136 CVE-2022-49111 CVE-2025-21764 CVE-2025-37803 CVE-2022-49395 CVE-2022-49471 CVE-2025-21756 CVE-2025-37785 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to shenandoah-jdk8u462-b08 (GA) fixing the following CVEs: - CVE-2025-30749: better Glyph drawing - CVE-2025-30754: enhance TLS protocol support - CVE-2025-30761: improve scripting supports - CVE-2025-50106: glyph out-of-memory access and crash Important TuxCare License Agreement CVE-2025-30761 CVE-2025-50106 CVE-2025-30754 CVE-2025-30749 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdo_pgsql extensions Important TuxCare License Agreement CVE-2025-6491 CVE-2025-1735 CVE-2025-1220 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-4373: fix integer overflow in g_string_insert_unichar() to prevent buffer underwrite Moderate TuxCare License Agreement CVE-2025-4373 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-6965: fix memory corruption issue caused by exceeding the number of columns with aggregate terms Critical TuxCare License Agreement CVE-2025-6965 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update Intel CPU microcode to 20250512: - Fixes CVE-2025-20012, CVE-2025-20623, CVE-2025-24495, CVE-2024-28956 CVE-2024-43420, CVE-2024-45332 - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003f7; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000639; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Addition of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) at revision 0xa0000d1; - Addition of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) at revision 0x10003a2; - Addition of cpuid:B0650/0x80 (ARL-U A1) microcode (in microcode.dat) at revision 0xa; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4128; - Addition of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) at revision 0x11f; - Addition of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C0664/0x82 microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C06A2/0x82 microcode (in microcode.dat) at revision 0x118; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002a9; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Update of cpuid:50657/0xbf (CLX-SP/W/X B1/L1) microcode (in microcode.dat) from revision 0x5003707 up to 0x5003901; - Update of cpuid:5065B/0xbf (CPX-SP A1) microcode (in microcode.dat) from revision 0x7002904 up to 0x7002b01; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003f5 up to 0xd000404; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002c0 up to 0x10002d0; - Update of cpuid:706A8/0x01 (GLK-R R0) microcode (in microcode.dat) from revision 0x24 up to 0x26; - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode (in microcode.dat) from revision 0xc6 up to 0xca; - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode (in microcode.dat) from revision 0xb8 up to 0xbc; - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode (in microcode.dat) from revision 0x38 up to 0x3c; - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode (in microcode.dat) from revision 0x52 up to 0x56; - Update of cpuid:806EC/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c0003f7; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000639; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c0003f7; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000639; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c0003f7; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000639; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000639; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x9 up to 0xa; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x436 up to 0x437; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x102 up to 0x104; - Update of cpuid:A0652/0x20 (CML-H R1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0653/0x22 (CML-S 6+2 G1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0655/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0660/0x80 (CML-U 6+2 A0) microcode (in microcode.dat) from revision 0xfe up to 0x102; - Update of cpuid:A0661/0x80 (CML-U 6+2 v2 K1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x63 up to 0x64; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x20 up to 0x24; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000330 up to 0x3000341; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12c up to 0x12f; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4124 up to 0x4128; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4124 up to 0x4128; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1c up to 0x1d; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000291 up to 0x210002a9; Moderate TuxCare License Agreement CVE-2024-43420 CVE-2025-20012 CVE-2024-45332 CVE-2025-24495 CVE-2025-20623 CVE-2024-28956 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary script execution via specially crafted filenames in a repository - CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary file creation/truncation - CVE-2025-46835: fix a vulnerability in Git GUI where editing files in maliciously named directories could lead to arbitrary file overwrite Moderate TuxCare License Agreement CVE-2025-27614 CVE-2025-46835 CVE-2025-27613 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by `atype` corruption Important TuxCare License Agreement CVE-2025-7425 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - net: ch9200: fix uninitialised access during mii_nway_restart {CVE-2025-38086} - idpf: fix null-ptr-deref in idpf_features_check {CVE-2025-38053} - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead {CVE-2022-49977} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list {CVE-2025-21919} - wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905} - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes {CVE-2025-21991} - ext4: ignore xattrs past end {CVE-2025-37738} - ext4: fix off-by-one error in do_split {CVE-2025-23150} - net: atm: fix use after free in lec_send() {CVE-2025-22004} - cifs: potential buffer overflow in handling symlinks {CVE-2022-49058} - media: uvcvideo: Remove dangling pointers {CVE-2024-58002} Important TuxCare License Agreement CVE-2022-49977 CVE-2025-23150 CVE-2025-21991 CVE-2025-38086 CVE-2022-49788 CVE-2025-37738 CVE-2025-22004 CVE-2024-58002 CVE-2025-38053 CVE-2025-21919 CVE-2025-21905 CVE-2022-49058 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration Moderate TuxCare License Agreement CVE-2024-52006 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-8058: fix double-free after allocation failure in regcomp Moderate TuxCare License Agreement CVE-2025-8058 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-40909: prevent race conditions during cloning dirhandles Moderate TuxCare License Agreement CVE-2025-40909 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths Moderate TuxCare License Agreement CVE-2024-46901 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-32988: fix double-free vulnerability when exporting othernames in SAN Important TuxCare License Agreement CVE-2025-32988 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-50349: fix ANSI escape sequence vulnerability that occurs when asking for credentials interactively Low TuxCare License Agreement CVE-2024-50349 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352} - xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982} - nfsd: fix race between laundromat and free_stateid {CVE-2024-50106} - nfsd: split sc_status out of sc_type {CVE-2024-50106} - nfsd: avoid race after unhash_delegation_locked() {CVE-2024-50106} - nfsd: don't call functions with side-effecting inside WARN_ON() {CVE-2024-50106} - can: peak_usb: fix use after free bugs {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159} - i2c/designware: Fix an initialization issue {CVE-2025-38380} - RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200} - udp: Fix memory accounting leak. {CVE-2025-22058} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI {CVE-2025-38085} - padata: fix UAF in padata_reorder {CVE-2025-21727} - net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177} - sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177} - sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177} - sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177} - sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177} - sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000} - net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477} - tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464} - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211} - scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332} - netfilter: xtables: avoid NFPROTO_UNSPEC where needed {CVE-2024-50038} - netfilter: xtables: Add snapshot of hardidletimer target {CVE-2024-50038} - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079} - ext4: avoid resizing to a partial cluster size {CVE-2022-50020} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890} - net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273} - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove {CVE-2025-22020} Important TuxCare License Agreement CVE-2025-38177 CVE-2025-38332 CVE-2025-38464 CVE-2025-38273 CVE-2022-50127 CVE-2025-38352 CVE-2025-38350 CVE-2025-38000 CVE-2025-38477 CVE-2025-38211 CVE-2025-38200 CVE-2025-38380 CVE-2025-38159 CVE-2025-38085 CVE-2021-47670 CVE-2025-38079 CVE-2025-38052 CVE-2024-57982 CVE-2025-38250 CVE-2025-21727 CVE-2024-50106 CVE-2022-50020 CVE-2025-37890 CVE-2025-22058 CVE-2025-22020 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2020-16156: fix Signature Verification Bypass Important TuxCare License Agreement CVE-2020-16156 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-49630: fix denial of service attack triggered by untrusted clients causing an assertion in mod_proxy_http2 - CVE-2025-23048: fix access control bypass by trusted clients in mod_ssl configurations - CVE-2024-47252: escape user-supplied data in mod_ssl to prevent untrusted SSL/TLS clients from inserting escape characters into log file - CVE-2025-49812: remove support for TLS upgrade to mitigate HTTP desynchronisation attack Important TuxCare License Agreement CVE-2024-47252 CVE-2025-23048 CVE-2025-49812 CVE-2025-49630 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-5318: fix out-of-bounds read in sftp_handle function to prevent potential memory disclosure Important TuxCare License Agreement CVE-2025-5318 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-5372: uninitialized key buffers caused by inconsistent ssh_kdf() return value Important TuxCare License Agreement CVE-2025-5372 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-32990: fix heap-buffer-overflow issue in template parsing logic within certtool utility Important TuxCare License Agreement CVE-2025-32990 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-58060: fix authentication bypass issue caused by not checking password when AuthType is not Basic. Important TuxCare License Agreement CVE-2025-58060 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-9230: fix incorrect check of unwrapped key size Moderate TuxCare License Agreement CVE-2025-9230 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-0395: fix buffer underallocation in assert() and libc_fatal() mmap handling Moderate TuxCare License Agreement CVE-2025-0395 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-6395: fix NULL pointer dereference in _gnutls_figure_common_ciphersuite() Moderate TuxCare License Agreement CVE-2025-6395 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure Important TuxCare License Agreement CVE-2025-62168 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226} {CVE-2023-53226} - wifi: mac80211: check S1G action frame size {CVE-2023-53257} {CVE-2023-53257} - wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864} {CVE-2025-39864} - partitions: mac: fix handling of bogus partition table {CVE-2025-21772} {CVE-2025-21772} - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} {CVE-2024-58014} - wifi: at76c50x: fix use after free access in at76_disconnect {CVE-2025-37796} {CVE-2025-37796} - dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} {CVE-2024-35939} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} {CVE-2022-50386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} {CVE-2025-39817} - wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937} {CVE-2024-35937} - nfs: fix UAF in direct writes {CVE-2024-26958} {CVE-2024-26958} - wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} {CVE-2024-36921} - net/smc: avoid data corruption caused by decline {CVE-2023-52775} {CVE-2023-52775} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} {CVE-2024-39487} - scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} {CVE-2024-40978} - mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961} {CVE-2024-26961} - platform/x86: wmi: Fix opening of char device {CVE-2023-52864} {CVE-2023-52864} - net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739} {CVE-2024-26739} - drm/dp_mst: Fix resetting msg rx state after topology removal {CVE-2024-57876} {CVE-2024-57876} - net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556} {CVE-2024-38556} - of: Fix double free in of_parse_phandle_with_args_map {CVE-2023-52679} {CVE-2023-52679} - xhci: Handle TD clearing for multiple streams case {CVE-2024-40927} {CVE-2024-40927} - wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} {CVE-2023-52530} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit {CVE-2024-27395} {CVE-2024-27395} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586} {CVE-2024-38586} - media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} {CVE-2023-52764} - media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847} {CVE-2023-52847} - vsock: Fix transport_* TOCTOU {CVE-2025-38461} {CVE-2025-38461} - ppdev: Add an error check in register_device {CVE-2024-36015} {CVE-2024-36015} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} {CVE-2025-38556} - iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904} {CVE-2024-57904} - perf/aux: Fix AUX buffer serialization {CVE-2024-46713} {CVE-2024-46713} - net_sched: hfsc: Fix a UAF vulnerability in class handling {CVE-2025-37797} {CVE-2025-37797} - wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072} {CVE-2024-58072} - wifi: rtlwifi: remove unused dualmac control leftovers {CVE-2024-58072} {CVE-2024-58072} - wifi: rtlwifi: remove unused timer and related code {CVE-2024-58072} {CVE-2024-58072} - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() {CVE-2025-22121} {CVE-2025-22121} - ext4: move where set the MAY_INLINE_DATA flag is set {CVE-2025-22121} {CVE-2025-22121} - ext4: introduce ITAIL helper {CVE-2025-22121} {CVE-2025-22121} - ext4: improve xattr consistency checking and error reporting {CVE-2025-22121} {CVE-2025-22121} - mm: fix zswap writeback race condition {CVE-2023-53178} {CVE-2023-53178} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367} {CVE-2022-50367} - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control - ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} {CVE-2025-39757} - smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527} {CVE-2025-38527} - crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} {CVE-2023-53373} - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() {CVE-2024-56539} {CVE-2024-56539} - bpf: Remove tst_run from lwt_seg6local_prog_ops. {CVE-2024-46754} {CVE-2024-46754} - drm/amdgpu: set the right AMDGPU sg segment limitation {CVE-2024-56594} {CVE-2024-56594} - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001} {CVE-2025-38001} - idpf: convert control queue mutex to a spinlock {CVE-2025-38392} {CVE-2025-38392} - kobject_uevent: Fix OOB access within zap_modalias_env() {CVE-2024-42292} {CVE-2024-42292} - bpf: Don't use tnum_range on array range checking for poke descriptors {CVE-2022-49985} {CVE-2022-49985} - net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} {CVE-2023-53125} - soundwire: cadence: fix invalid PDI offset {CVE-2024-38635} {CVE-2024-38635} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} {CVE-2025-21704} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} {CVE-2024-53214} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} {CVE-2024-52332} - do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} {CVE-2025-38498} - Bluetooth: qca: add missing firmware sanity checks {CVE-2024-36880} {CVE-2024-36880} - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} {CVE-2023-53305} - ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} {CVE-2024-56570} - enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659} {CVE-2024-38659} - dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929} {CVE-2024-57929} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730} {CVE-2025-39730} - drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119} {CVE-2024-42119} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} {CVE-2024-56616} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} {CVE-2025-38718} Important TuxCare License Agreement CVE-2025-38392 CVE-2025-38001 CVE-2024-26961 CVE-2024-26958 CVE-2024-53214 CVE-2022-49985 CVE-2022-50367 CVE-2025-22121 CVE-2025-39864 CVE-2023-53226 CVE-2025-37796 CVE-2025-21772 CVE-2024-58072 CVE-2022-50386 CVE-2024-57904 CVE-2023-53373 CVE-2025-39757 CVE-2023-53305 CVE-2024-56539 CVE-2024-56570 CVE-2025-39730 CVE-2025-38527 CVE-2024-42119 CVE-2024-38659 CVE-2025-38718 CVE-2025-37797 CVE-2024-56616 CVE-2024-46713 CVE-2025-21704 CVE-2024-52332 CVE-2025-38498 CVE-2025-38556 CVE-2024-38635 CVE-2023-53125 CVE-2024-57876 CVE-2024-42292 CVE-2024-35939 CVE-2024-40978 CVE-2024-38556 CVE-2024-39487 CVE-2024-36921 CVE-2024-35937 CVE-2023-52864 CVE-2023-52775 CVE-2023-52764 CVE-2023-52679 CVE-2024-27395 CVE-2023-52530 CVE-2024-26739 CVE-2024-38586 CVE-2023-53257 CVE-2024-56594 CVE-2023-53178 CVE-2024-46754 CVE-2025-39817 CVE-2024-57929 CVE-2024-36880 CVE-2024-36015 CVE-2023-52847 CVE-2024-58014 CVE-2024-40927 CVE-2025-38461 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-40778: fix issue with BIND being too lenient when accepting records from answers to prevent the injection of forged data into the cache Important TuxCare License Agreement CVE-2025-40778 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-58364: fix deserialization and validation issue in printer attributes to prevent null dereference Moderate TuxCare License Agreement CVE-2025-58364 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to shenandoah-jdk8u472-b08 (GA) fixing the following CVEs: - CVE-2025-53057: enhance certificate handling - CVE-2025-53066: enhance Path Factories Moderate TuxCare License Agreement CVE-2025-53057 CVE-2025-53066 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-11083: fix corrupt ELF section header handling Important TuxCare License Agreement CVE-2025-11083 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to openjdk-11.0.29+7 (GA). The following CVEs were fixed: - CVE-2023-48161: fix buffer overflow vulnerability - CVE-2024-21147: RangeCheckElimination array index overflow - CVE-2025-21587: fix TLS connection support to avoid unauthorized access to critical data - CVE-2025-53057: enhance certificate handling to prevent unauthorized creation - CVE-2025-53066: enhance Path Factories to prevent unauthorized access Important TuxCare License Agreement CVE-2025-53057 CVE-2025-53066 CVE-2023-48161 CVE-2025-21587 CVE-2024-21147 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-61985: potential code execution using the ‘\0’ character in an ssh:// URI, when a ProxyCommand is used Moderate TuxCare License Agreement CVE-2025-61984 CVE-2025-61985 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Rebase to version 2.5.0 - CVE-2024-28757: prevent billion laughs attacks in isolated external parser (part of #839), reject direct parameter entity recursion (part of #839) - CVE-2025-59375: fix memory amplification and add allocation tracker - CVE-2013-0340: properly handle entities expansion Important TuxCare License Agreement CVE-2024-28757 CVE-2025-59375 CVE-2013-0340 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-0938: disallow square brackets in domain names for parsed URLs to prevent differential URL parsing Moderate TuxCare License Agreement CVE-2025-0938 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-58098: don't pass querry string args as command line arguments to SSI-invoked CGI scripts Important TuxCare License Agreement CVE-2025-58098 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2023-50387: evaluate DNSSEC responses to prevent KeyTrap denial of service issue - CVE-2023-50868: fix Closest Encloser Proof aspect to prevent CPU consumption for SHA-1 computations in random subdomain attacks Important TuxCare License Agreement CVE-2023-50868 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Fix CVE-2024-1488: improper access control for remote control interface Previous defaults allowed any process to change unbound settings Important TuxCare License Agreement CVE-2024-1488 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-5994: fix cache poisoning vulnerability by segregating outgoing queries to accommodate for different outgoing ECS information Important TuxCare License Agreement CVE-2025-5994 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-32021: fix issue where cloning local source repository with symlinks may create hardlinks to arbitrary user-readable files in the `objects/` directory. Important TuxCare License Agreement CVE-2024-32021 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Update to MySQL 8.0.44 - CVEs fixed: CVE-2025-53040 CVE-2025-53042 CVE-2025-53044 CVE-2025-53045 CVE-2025-53053 CVE-2025-53054 CVE-2025-53062 CVE-2025-53069 Moderate TuxCare License Agreement CVE-2025-53044 CVE-2025-53045 CVE-2025-53062 CVE-2025-53040 CVE-2025-53054 CVE-2025-53069 CVE-2025-53042 CVE-2025-53053 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-66200: don't use request notes for suexec, stop accepting the obscure "note" option in RequestHeader - CVE-2025-65082: fix precedence of envvars from HTTP headers and Apache configuration Moderate TuxCare License Agreement CVE-2025-65082 CVE-2025-66200 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-9086: cookie: don't treat the leading slash as trailing Moderate TuxCare License Agreement CVE-2025-9086 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-68973: fix faulty double increment Important TuxCare License Agreement CVE-2025-68973 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-14178: fix heap buffer overflow in array_merge() by preventing integer overflow in precomputation of element counts Important TuxCare License Agreement CVE-2025-14178 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-8508: limit number of name compression calculations per packet to prevent CPU locking and potential denial of service Moderate TuxCare License Agreement CVE-2024-8508 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-12084: fix quadratic algorithm when building nested elements with xml.dom.minidom appendChild() method Moderate TuxCare License Agreement CVE-2025-12084 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-13601: fix heap-based buffer overflow issue by correcting calculation of buffer size in g_escape_uri_string() function. Important TuxCare License Agreement CVE-2025-13601 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-58436: fix issue where slow messages could delay cupsd Moderate TuxCare License Agreement CVE-2025-58436 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883} - comedi: aio_iiro_16: Fix bit shift out of bounds {CVE-2025-38529} - comedi: das6402: Fix bit shift out of bounds {CVE-2025-38482} - comedi: pcl812: Fix bit shift out of bounds {CVE-2025-38530} - comedi: das16m1: Fix bit shift out of bounds {CVE-2025-38483} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). {CVE-2025-40186} - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863} - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051} - libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285} - sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length {CVE-2025-39933} - vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673} - net: fix information leakage in /proc/net/ptype {CVE-2022-48757} - net/mlx5e: fix a potential double-free in fs_any_create_groups {CVE-2023-52667} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update {CVE-2024-35855} - Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982} - crypto: qat - resolve race condition during AER recovery {CVE-2024-26974} - perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835} - ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627} - pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940} - ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796} - wifi: ath11k: fix gtk offload status event locking {CVE-2023-52777} - ice: fix memory corruption bug with suspend and rebuild {CVE-2024-35911} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' {CVE-2024-27042} - drm/i915/vma: Fix UAF on destroy against retire race {CVE-2024-26939} - netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042} - Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386} - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] {CVE-2024-46815} - drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120} - nbd: fix incomplete validation of ioctl arg {CVE-2023-53513} - RDMA/rxe: Fix incomplete state save in rxe_requester {CVE-2023-53539} - netfilter: nftables: exthdr: fix 4-byte stack OOB write - net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823} - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid {CVE-2025-37927} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} - RDMA/rxe: Fix mr->map double free {CVE-2022-50543} - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024} - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies {CVE-2025-40096} - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free {CVE-2023-53552} - net: atlantic: fix fragment overflow handling in RX path {CVE-2025-68301} - net: atm: add lec_mutex {CVE-2025-38323} - net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789} - scsi: lpfc: Fix buffer free/clear order in deferred receive path {CVE-2025-39841} - jbd2: remove wrong sb->s_sequence check {CVE-2025-37839} - tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923} - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} - ftrace: Fix UAF when lookup kallsym after ftrace disabled {CVE-2025-38346} - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955} - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245} - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249} - md/raid1: Fix stack memory use after return in raid1_reshape {CVE-2025-38445} - atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459} - bpf: Avoid __bpf_prog_ret0_warn when jit fails {CVE-2025-38280} - vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618} - fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198} Important TuxCare License Agreement CVE-2025-37789 CVE-2023-52667 CVE-2023-52777 CVE-2024-26704 CVE-2024-26939 CVE-2024-26974 CVE-2024-35855 CVE-2024-36940 CVE-2023-52835 CVE-2025-39883 CVE-2025-38051 CVE-2025-38618 CVE-2023-53513 CVE-2025-40186 CVE-2025-37823 CVE-2024-27042 CVE-2025-37927 CVE-2023-52796 CVE-2025-38724 CVE-2024-41042 CVE-2025-38483 CVE-2025-37923 CVE-2025-38482 CVE-2025-38212 CVE-2025-38245 CVE-2025-38403 CVE-2022-50543 CVE-2025-38157 CVE-2025-38323 CVE-2025-40154 CVE-2025-39841 CVE-2025-40240 CVE-2025-38249 CVE-2025-38530 CVE-2025-39933 CVE-2024-35911 CVE-2025-37839 CVE-2022-48757 CVE-2024-38627 CVE-2023-53539 CVE-2023-53552 CVE-2024-26982 CVE-2025-38445 CVE-2025-38415 CVE-2025-38346 CVE-2024-42120 CVE-2024-46815 CVE-2023-53673 CVE-2025-38103 CVE-2025-37749 CVE-2025-38198 CVE-2025-38459 CVE-2025-39863 CVE-2025-38280 CVE-2025-68301 CVE-2025-40096 CVE-2023-53386 CVE-2025-38024 CVE-2025-39955 CVE-2025-68285 CVE-2025-38529 CVE-2025-40277 CVE-2025-40248 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - Upgrade to shenandoah-jdk8u482-b08 (GA) fixing the following CVE: - CVE-2026-21945: enhance certificate checking - CVE-2026-21925: improve JMX connections - CVE-2026-21933: improve HttpServer request handling Important TuxCare License Agreement CVE-2026-21933 CVE-2026-21925 CVE-2026-21945 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-24515: make XML_ExternalEntityParserCreate copy unknown encoding handler user data Low TuxCare License Agreement CVE-2026-24515 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex() Important TuxCare License Agreement CVE-2025-69421 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-14087: fix integer overflow when parsing (byte)strings Critical TuxCare License Agreement CVE-2025-14087 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-15367: reject control characters in POP3 commands to prevent command injection via embedded newlines Important TuxCare License Agreement CVE-2025-15366 CVE-2025-15367 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-69419: fix one-byte write-before-buffer triggered by malicious PKCS#12 BMPString containing non-ASCII BMP code point; validate UTF8_putc return and use correct destination capacity during conversion from UTF-16BE into UTF-8 Important TuxCare License Agreement CVE-2025-69419 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-61662: fix a bug in gettext leading to potential resource leak Important TuxCare License Agreement CVE-2025-61662 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2017-8923: fix integer overflow when concatenating strings Critical TuxCare License Agreement CVE-2017-8923 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2026-1299: raise exceptions for malformed input to prevent processing invalid or dangerous headers - CVE-2024-6923: encode newlines in headers and verify headers are sound Important TuxCare License Agreement CVE-2024-6923 CVE-2026-1299 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2024-12718: extractall: re-apply the filter at directory-attribute fixup, skip fixup if the entry is no longer a directory - CVE-2025-4138: data_filter: strip .. components from symlink targets in data_filter to prevent traversal via symlinks in the link target - CVE-2025-4330: re-apply filter when a hard/symlink extraction falls back to copying another archive member - CVE-2025-4435: extract/extractall: don't extract rejected members when errorlevel=0 - CVE-2025-4517: raise exceptions on OS errors in realpath to prevent overly-long symlink chains from evading destination bounds checking Important TuxCare License Agreement CVE-2025-4435 CVE-2024-12718 CVE-2025-4138 CVE-2025-4330 CVE-2025-4517 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-8194: tarfile: validate archives to ensure non-negative member offsets to prevent infinite loop and resource exhaustion Important TuxCare License Agreement CVE-2025-8194 CVE-2025-15367 CVE-2024-7592 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2017-9119: handle memory limit error during string reallocation correctly Critical TuxCare License Agreement CVE-2017-9119 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728} - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729} - net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180} - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. {CVE-2025-39913} - fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866} - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration {CVE-2023-54296} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800} - net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() {CVE-2023-54114} - isofs: Prevent the use of too small fid {CVE-2025-37780} - media: dvb-frontends: avoid stack overflow warnings with clang {CVE-2024-27075} - ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886} - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304} - HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824} - cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} - wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891} - i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853} - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680} - fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691} - fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322} - usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760} - mptcp: fix race condition in mptcp_schedule_work() {CVE-2025-40258} - KVM: x86: Reset IRTE to host control if *new* route isn't postable {CVE-2025-37885} Important TuxCare License Agreement CVE-2025-38572 CVE-2025-38180 CVE-2025-39911 CVE-2025-40258 CVE-2025-40304 CVE-2025-38728 CVE-2025-39866 CVE-2023-54114 CVE-2025-40269 CVE-2025-38201 CVE-2024-27075 CVE-2025-40322 CVE-2025-39853 CVE-2025-68800 CVE-2024-35886 CVE-2023-54296 CVE-2025-38729 CVE-2025-38702 CVE-2026-23074 CVE-2025-39824 CVE-2025-39913 CVE-2025-39945 CVE-2025-38574 CVE-2025-38494 CVE-2025-39691 CVE-2025-37780 CVE-2025-37885 CVE-2025-38680 CVE-2025-39760 CVE-2025-68349 CVE-2025-39891 cpe:/o:centos:centos:8 Community Enterprise Operating System 8 - CVE-2025-15079: libssh global known_hosts file override - CVE-2025-14524: bearer token leak on cross-protocol redirect Low TuxCare License Agreement CVE-2025-14524 CVE-2025-15079 cpe:/o:centos:centos:8 /etc/els-release CentOS Stream release 8 \(ELS by TuxCare\) 1 libwebp libwebp-devel libwebp-java libwebp-tools git git-all git-core git-core-doc git-credential-libsecret git-daemon git-email git-gui git-instaweb git-subtree git-svn gitk gitweb perl-Git perl-Git-SVN libxml2 libxml2-devel libxml2-static python3-libxml2 java-1.8.0-openjdk java-1.8.0-openjdk-accessibility java-1.8.0-openjdk-accessibility-fastdebug java-1.8.0-openjdk-accessibility-slowdebug java-1.8.0-openjdk-demo java-1.8.0-openjdk-demo-fastdebug java-1.8.0-openjdk-demo-slowdebug java-1.8.0-openjdk-devel java-1.8.0-openjdk-devel-fastdebug java-1.8.0-openjdk-devel-slowdebug java-1.8.0-openjdk-fastdebug java-1.8.0-openjdk-headless java-1.8.0-openjdk-headless-fastdebug java-1.8.0-openjdk-headless-slowdebug java-1.8.0-openjdk-javadoc java-1.8.0-openjdk-javadoc-zip java-1.8.0-openjdk-slowdebug java-1.8.0-openjdk-src java-1.8.0-openjdk-src-fastdebug java-1.8.0-openjdk-src-slowdebug compat-libpthread-nonshared glibc glibc-all-langpacks glibc-benchtests glibc-common glibc-devel glibc-doc glibc-gconv-extra glibc-headers glibc-langpack-aa glibc-langpack-af glibc-langpack-agr glibc-langpack-ak glibc-langpack-am glibc-langpack-an glibc-langpack-anp glibc-langpack-ar glibc-langpack-as glibc-langpack-ast glibc-langpack-ayc glibc-langpack-az glibc-langpack-be glibc-langpack-bem glibc-langpack-ber glibc-langpack-bg glibc-langpack-bhb glibc-langpack-bho glibc-langpack-bi glibc-langpack-bn glibc-langpack-bo glibc-langpack-br glibc-langpack-brx glibc-langpack-bs glibc-langpack-byn glibc-langpack-ca glibc-langpack-ce glibc-langpack-chr glibc-langpack-cmn glibc-langpack-crh glibc-langpack-cs glibc-langpack-csb glibc-langpack-cv glibc-langpack-cy glibc-langpack-da glibc-langpack-de glibc-langpack-doi glibc-langpack-dsb glibc-langpack-dv glibc-langpack-dz glibc-langpack-el glibc-langpack-en glibc-langpack-eo glibc-langpack-es glibc-langpack-et glibc-langpack-eu glibc-langpack-fa glibc-langpack-ff glibc-langpack-fi glibc-langpack-fil glibc-langpack-fo glibc-langpack-fr glibc-langpack-fur glibc-langpack-fy glibc-langpack-ga glibc-langpack-gd glibc-langpack-gez glibc-langpack-gl glibc-langpack-gu glibc-langpack-gv glibc-langpack-ha glibc-langpack-hak glibc-langpack-he glibc-langpack-hi glibc-langpack-hif glibc-langpack-hne glibc-langpack-hr glibc-langpack-hsb glibc-langpack-ht glibc-langpack-hu glibc-langpack-hy glibc-langpack-ia glibc-langpack-id glibc-langpack-ig glibc-langpack-ik glibc-langpack-is glibc-langpack-it glibc-langpack-iu glibc-langpack-ja glibc-langpack-ka glibc-langpack-kab glibc-langpack-kk glibc-langpack-kl glibc-langpack-km glibc-langpack-kn glibc-langpack-ko glibc-langpack-kok glibc-langpack-ks glibc-langpack-ku glibc-langpack-kw glibc-langpack-ky glibc-langpack-lb glibc-langpack-lg glibc-langpack-li glibc-langpack-lij glibc-langpack-ln glibc-langpack-lo glibc-langpack-lt glibc-langpack-lv glibc-langpack-lzh glibc-langpack-mag glibc-langpack-mai glibc-langpack-mfe glibc-langpack-mg glibc-langpack-mhr glibc-langpack-mi glibc-langpack-miq glibc-langpack-mjw glibc-langpack-mk glibc-langpack-ml glibc-langpack-mn glibc-langpack-mni glibc-langpack-mr glibc-langpack-ms glibc-langpack-mt glibc-langpack-my glibc-langpack-nan glibc-langpack-nb glibc-langpack-nds glibc-langpack-ne glibc-langpack-nhn glibc-langpack-niu glibc-langpack-nl glibc-langpack-nn glibc-langpack-nr glibc-langpack-nso glibc-langpack-oc glibc-langpack-om glibc-langpack-or glibc-langpack-os glibc-langpack-pa glibc-langpack-pap glibc-langpack-pl glibc-langpack-ps glibc-langpack-pt glibc-langpack-quz glibc-langpack-raj glibc-langpack-ro glibc-langpack-ru glibc-langpack-rw glibc-langpack-sa glibc-langpack-sah glibc-langpack-sat glibc-langpack-sc glibc-langpack-sd glibc-langpack-se glibc-langpack-sgs glibc-langpack-shn glibc-langpack-shs glibc-langpack-si glibc-langpack-sid glibc-langpack-sk glibc-langpack-sl glibc-langpack-sm glibc-langpack-so glibc-langpack-sq glibc-langpack-sr glibc-langpack-ss glibc-langpack-st glibc-langpack-sv glibc-langpack-sw glibc-langpack-szl glibc-langpack-ta glibc-langpack-tcy glibc-langpack-te glibc-langpack-tg glibc-langpack-th glibc-langpack-the glibc-langpack-ti glibc-langpack-tig glibc-langpack-tk glibc-langpack-tl glibc-langpack-tn glibc-langpack-to glibc-langpack-tpi glibc-langpack-tr glibc-langpack-ts glibc-langpack-tt glibc-langpack-ug glibc-langpack-uk glibc-langpack-unm glibc-langpack-ur glibc-langpack-uz glibc-langpack-ve glibc-langpack-vi glibc-langpack-wa glibc-langpack-wae glibc-langpack-wal glibc-langpack-wo glibc-langpack-xh glibc-langpack-yi glibc-langpack-yo glibc-langpack-yue glibc-langpack-yuw glibc-langpack-zh glibc-langpack-zu glibc-locale-source glibc-minimal-langpack glibc-nss-devel glibc-static glibc-utils libnsl nscd nss_db nss_hesiod iwl100-firmware iwl1000-firmware iwl105-firmware iwl135-firmware iwl2000-firmware iwl2030-firmware iwl3160-firmware iwl3945-firmware iwl4965-firmware iwl5000-firmware iwl5150-firmware iwl6000-firmware iwl6000g2a-firmware iwl6000g2b-firmware iwl6050-firmware iwl7260-firmware libertas-sd8686-firmware libertas-sd8787-firmware libertas-usb8388-firmware libertas-usb8388-olpc-firmware linux-firmware openldap openldap-clients openldap-devel openldap-servers python2 python2-debug python2-devel python2-libs python2-test python2-tkinter python2-tools wget grub2-common grub2-efi-ia32 grub2-efi-ia32-cdboot grub2-efi-ia32-modules grub2-efi-x64 grub2-efi-x64-cdboot grub2-efi-x64-modules grub2-pc grub2-pc-modules grub2-tools grub2-tools-efi grub2-tools-extra grub2-tools-minimal shim-ia32 shim-x64 httpd httpd-devel httpd-filesystem httpd-manual httpd-tools mod_ldap mod_proxy_html mod_session mod_ssl curl curl-minimal libcurl libcurl-devel libcurl-minimal bpftool kernel kernel-core kernel-cross-headers kernel-debug kernel-debug-core kernel-debug-devel kernel-debug-modules kernel-debug-modules-extra kernel-debug-modules-internal kernel-devel kernel-headers kernel-ipaclones-internal kernel-modules kernel-modules-extra kernel-modules-internal kernel-selftests-internal kernel-tools kernel-tools-libs kernel-tools-libs-devel perf python3-perf expat expat-devel expat-static bind bind-chroot bind-devel bind-export-devel bind-export-libs bind-libs bind-libs-lite bind-license bind-lite-devel bind-pkcs11 bind-pkcs11-devel bind-pkcs11-libs bind-pkcs11-utils bind-sdb bind-sdb-chroot bind-utils python3-bind php php-bcmath php-cli php-common php-dba php-dbg php-devel php-embedded php-enchant php-fpm php-gd php-gmp php-intl php-json php-ldap php-mbstring php-mysqlnd php-odbc php-opcache php-pdo php-pgsql php-process php-recode php-snmp php-soap php-xml php-xmlrpc haproxy bzip2 bzip2-devel bzip2-libs bzip2-static openssl openssl-devel openssl-libs openssl-perl openssl-static binutils binutils-devel squid pam pam-devel rsync rsync-daemon mysql mysql-common mysql-devel mysql-errmsg mysql-libs mysql-server mysql-test cups cups-client cups-devel cups-filesystem cups-ipptool cups-libs cups-lpd openssh openssh-askpass openssh-cavs openssh-clients openssh-keycat openssh-ldap openssh-server pam_ssh_agent_auth cpp gcc gcc-c++ gcc-gdb-plugin gcc-gfortran gcc-offload-nvptx gcc-plugin-annobin gcc-plugin-devel libasan libasan-static libatomic libatomic-static libgcc libgfortran libgfortran-static libgomp libgomp-offload-nvptx libitm libitm-devel libitm-static liblsan liblsan-static libquadmath libquadmath-devel libquadmath-static libstdc++ libstdc++-devel libstdc++-docs libstdc++-static libtsan libtsan-static libubsan libubsan-static libtasn1 libtasn1-devel libtasn1-tools gnutls gnutls-c++ gnutls-dane gnutls-devel gnutls-utils perl perl-Attribute-Handlers perl-Devel-Peek perl-Devel-SelfStubber perl-Errno perl-ExtUtils-Embed perl-ExtUtils-Miniperl perl-IO perl-IO-Zlib perl-Locale-Maketext-Simple perl-Math-Complex perl-Memoize perl-Module-Loaded perl-Net-Ping perl-Pod-Html perl-SelfLoader perl-Test perl-Time-Piece perl-devel perl-interpreter perl-libnetcfg perl-libs perl-macros perl-open perl-tests perl-utils sudo sudo-devel glib2 glib2-devel glib2-doc glib2-fam glib2-static glib2-tests lemon sqlite sqlite-analyzer sqlite-devel sqlite-doc sqlite-libs sqlite-tcl microcode_ctl /etc/dnf/modules.d/subversion.module \[subversion\][\w\W]* 1 mod_dav_svn subversion subversion-devel subversion-gnome subversion-javahl subversion-libs subversion-perl subversion-ruby subversion-tools perl-CPAN perl-CPAN-tests /etc/dnf/modules.d/httpd.module \[httpd\][\w\W]* 1 libssh libssh-config libssh-devel /etc/dnf/modules.d/squid.module \[squid\][\w\W]* 1 java-11-openjdk java-11-openjdk-demo java-11-openjdk-devel java-11-openjdk-headless java-11-openjdk-javadoc java-11-openjdk-javadoc-zip java-11-openjdk-jmods java-11-openjdk-src java-11-openjdk-static-libs /etc/dnf/modules.d/python27.module \[python27\][\w\W]* 1 python3-unbound unbound unbound-devel unbound-libs /etc/dnf/modules.d/mysql.module \[mysql\][\w\W]* 1 gnupg2 gnupg2-smime /etc/dnf/modules.d/php.module \[php\][\w\W]* 1 platform-python platform-python-debug platform-python-devel python3-devel python3-idle python3-libs python3-test python3-tkinter i686|x86_64 0:1.0.0-9.el8.tuxcare.els1 05b555b38483c65d d07bf2a08d50eb66 x86_64 0:1.0.0-9.el8.tuxcare.els1 x86_64 0:2.43.0-1.el8.tuxcare.els1 0:2.43.0-1.el8.tuxcare.els1 i686|x86_64 0:2.9.7-18.el8.tuxcare.els1 x86_64 0:2.9.7-18.el8.tuxcare.els1 x86_64 1:1.8.0.412.b08-1.el8.tuxcare.els1 1:1.8.0.412.b08-1.el8.tuxcare.els1 x86_64 0:2.28-251.el8.tuxcare.els1 i686|x86_64 0:2.28-251.el8.tuxcare.els1 0:2.28-251.el8.tuxcare.els1 0:39.31.5.1-121.gitb3132c18.el8.tuxcare.els1 1:39.31.5.1-121.gitb3132c18.el8.tuxcare.els1 0:18.168.6.1-121.gitb3132c18.el8.tuxcare.els1 1:25.30.13.0-121.gitb3132c18.el8.tuxcare.els1 0:15.32.2.9-121.gitb3132c18.el8.tuxcare.els1 0:228.61.2.24-121.gitb3132c18.el8.tuxcare.els1 0:8.83.5.1_1-121.gitb3132c18.el8.tuxcare.els1 0:8.24.2.2-121.gitb3132c18.el8.tuxcare.els1 0:9.221.4.1-121.gitb3132c18.el8.tuxcare.els1 0:41.28.5.1-121.gitb3132c18.el8.tuxcare.els1 0:20240111-121.gitb3132c18.el8.tuxcare.els1 2:20240111-121.gitb3132c18.el8.tuxcare.els1 x86_64 0:2.43.0-1.el8.tuxcare.els2 0:2.43.0-1.el8.tuxcare.els2 i686|x86_64 0:2.4.46-18.el8.tuxcare.els3 x86_64 0:2.4.46-18.el8.tuxcare.els3 x86_64 0:2.7.18-17.module_el8+2203+abd5b761.tuxcare.els1 x86_64 0:1.19.5-11.el8.tuxcare.els1 x86_64 1:1.8.0.422.b05-1.el8.tuxcare.els1 1:1.8.0.422.b05-1.el8.tuxcare.els1 1:2.02-129.el8.tuxcare.els1 x86_64 1:2.02-129.el8.tuxcare.els1 x86_64 0:15.8-1.el8_2.tuxcare.els1 x86_64 0:2.4.37-64.module_el8+2207+9493da45.tuxcare.els1 0:2.4.37-64.module_el8+2207+9493da45.tuxcare.els1 x86_64 1:2.4.37-64.module_el8+2207+9493da45.tuxcare.els1 x86_64 0:7.61.1-34.el8.tuxcare.els1 i686|x86_64 0:7.61.1-34.el8.tuxcare.els1 (^4\.18\.0\-553\.6\.1\.el8_10\.tuxcare\.els(\d{2,}|[2-9]).(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els2 i686|x86_64 0:2.2.5-13.el8.tuxcare.els1 x86_64 0:2.2.5-13.el8.tuxcare.els1 x86_64 32:9.11.36-13.el8.tuxcare.els1 i686|x86_64 32:9.11.36-13.el8.tuxcare.els1 32:9.11.36-13.el8.tuxcare.els1 x86_64 32:9.11.36-13.el8.tuxcare.els2 i686|x86_64 32:9.11.36-13.el8.tuxcare.els2 32:9.11.36-13.el8.tuxcare.els2 (^4\.18\.0\-553\.6\.1\.el8_10\.tuxcare\.els(\d{2,}|[3-9]).(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els3 x86_64 0:7.2.24-1.module_el8+2215+5fe6689e.tuxcare.els1 x86_64 0:2.7.18-17.module_el8+2217+fdd49733.tuxcare.els3 0:39.31.5.1-121.gitb3132c18.el8.tuxcare.els2 1:39.31.5.1-121.gitb3132c18.el8.tuxcare.els2 0:18.168.6.1-121.gitb3132c18.el8.tuxcare.els2 1:25.30.13.0-121.gitb3132c18.el8.tuxcare.els2 0:15.32.2.9-121.gitb3132c18.el8.tuxcare.els2 0:228.61.2.24-121.gitb3132c18.el8.tuxcare.els2 0:8.83.5.1_1-121.gitb3132c18.el8.tuxcare.els2 0:8.24.2.2-121.gitb3132c18.el8.tuxcare.els2 0:9.221.4.1-121.gitb3132c18.el8.tuxcare.els2 0:41.28.5.1-121.gitb3132c18.el8.tuxcare.els2 0:20240111-121.gitb3132c18.el8.tuxcare.els2 2:20240111-121.gitb3132c18.el8.tuxcare.els2 x86_64 0:2.4.37-64.module_el8+2221+108762ce.tuxcare.els2 0:2.4.37-64.module_el8+2221+108762ce.tuxcare.els2 x86_64 1:2.4.37-64.module_el8+2221+108762ce.tuxcare.els2 (^4\.18\.0\-553\.6\.1\.el8_10\.tuxcare\.els(\d{2,}|[4-9]).(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els4 x86_64 0:7.2.24-1.module_el8+2224+94df89ba.tuxcare.els2 x86_64 32:9.11.36-13.el8.tuxcare.els4 i686|x86_64 32:9.11.36-13.el8.tuxcare.els4 32:9.11.36-13.el8.tuxcare.els4 x86_64 1:1.8.0.432.b06-1.el8.tuxcare.els1 1:1.8.0.432.b06-1.el8.tuxcare.els1 x86_64 0:1.8.27-5.el8.tuxcare.els1 x86_64 0:1.0.6-26.el8.tuxcare.els1 i686|x86_64 0:1.0.6-26.el8.tuxcare.els1 x86_64 1:1.1.1k-12.el8.tuxcare.els1 i686|x86_64 1:1.1.1k-12.el8.tuxcare.els1 (^4\.18\.0\-553\.6\.1\.el8_10\.tuxcare\.els(\d{2,}|[5-9]).(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els5 i686|x86_64 0:2.2.5-13.el8.tuxcare.els2 x86_64 0:2.2.5-13.el8.tuxcare.els2 x86_64 0:2.30-123.el8.tuxcare.els1 i686|x86_64 0:2.30-123.el8.tuxcare.els1 x86_64 7:4.15-10.module_el8+2236+26d7e591.tuxcare.els1 i686|x86_64 0:1.3.1-33.el8.tuxcare.els1 x86_64 0:7.2.24-1.module_el8+2240+773577c9.tuxcare.els3 x86_64 0:7.2.24-1.module_el8+2244+0e09a123.tuxcare.els4 x86_64 0:7.2.24-1.module_el8+2245+9b3bf504.tuxcare.els5 x86_64 0:7.2.24-1.module_el8+2246+ce7bac14.tuxcare.els6 x86_64 7:4.15-10.module_el8+2247+604b7535.tuxcare.els2 x86_64 0:7.2.24-1.module_el8+2248+0f5ae458.tuxcare.els7 x86_64 0:7.2.24-1.module_el8+2252+98bb45e8.tuxcare.els8 x86_64 0:7.2.24-1.module_el8+2253+450c6754.tuxcare.els9 (^4\.18\.0\-553\.6\.1\.el8_10\.tuxcare\.els(\d{2,}|[6-9]).(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els6 x86_64 0:3.1.3-19.el8.1.tuxcare.els1 0:3.1.3-19.el8.1.tuxcare.els1 x86_64 0:3.1.3-19.el8.1.tuxcare.els2 0:3.1.3-19.el8.1.tuxcare.els2 (^4\.18\.0\-553\.6\.1\.el8_10\.tuxcare\.els(\d{2,}|[7-9]).(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els7 x86_64 0:3.1.3-19.el8.1.tuxcare.els4 0:3.1.3-19.el8.1.tuxcare.els4 x86_64 0:7.2.24-1.module_el8+2259+c5875fdf.tuxcare.els10 0:39.31.5.1-121.gitb3132c18.el8.tuxcare.els3 1:39.31.5.1-121.gitb3132c18.el8.tuxcare.els3 0:18.168.6.1-121.gitb3132c18.el8.tuxcare.els3 1:25.30.13.0-121.gitb3132c18.el8.tuxcare.els3 0:15.32.2.9-121.gitb3132c18.el8.tuxcare.els3 0:228.61.2.24-121.gitb3132c18.el8.tuxcare.els3 0:8.83.5.1_1-121.gitb3132c18.el8.tuxcare.els3 0:8.24.2.2-121.gitb3132c18.el8.tuxcare.els3 0:9.221.4.1-121.gitb3132c18.el8.tuxcare.els3 0:41.28.5.1-121.gitb3132c18.el8.tuxcare.els3 0:20240111-121.gitb3132c18.el8.tuxcare.els3 2:20240111-121.gitb3132c18.el8.tuxcare.els3 (^4\.18\.0\-553\.6\.1\.el8_10\.tuxcare\.els(\d{2,}|[8-9]).(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els8 x86_64 0:8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1 x86_64 32:9.11.36-13.el8.tuxcare.els5 i686|x86_64 32:9.11.36-13.el8.tuxcare.els5 32:9.11.36-13.el8.tuxcare.els5 i686|x86_64 0:2.9.7-18.el8.tuxcare.els2 x86_64 0:2.9.7-18.el8.tuxcare.els2 x86_64 1:2.2.6-57.el8.tuxcare.els1 i686|x86_64 1:2.2.6-57.el8.tuxcare.els1 1:2.2.6-57.el8.tuxcare.els1 x86_64 0:2.30-123.el8.tuxcare.els2 i686|x86_64 0:2.30-123.el8.tuxcare.els2 i686|x86_64 0:2.9.7-18.el8.tuxcare.els3 x86_64 0:2.9.7-18.el8.tuxcare.els3 (^4\.18\.0\-553\.6\.1\.el8_10\.tuxcare\.els(\d{2,}|9).(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els9 x86_64 0:8.0p1-24.el8.tuxcare.els1 x86_64 0:0.10.3-7.24.el8.tuxcare.els1 i686|x86_64 0:2.9.7-18.el8.tuxcare.els4 x86_64 0:2.9.7-18.el8.tuxcare.els4 1:2.02-129.el8.tuxcare.els5 x86_64 1:2.02-129.el8.tuxcare.els5 x86_64 0:8.5.0-22.el8.tuxcare.els1 i686|x86_64 0:8.5.0-22.el8.tuxcare.els1 x86_64 1:1.8.0.452.b09-1.el8.tuxcare.els1 1:1.8.0.452.b09-1.el8.tuxcare.els1 i686|x86_64 0:2.2.5-13.el8.tuxcare.els3 x86_64 0:2.2.5-13.el8.tuxcare.els3 i686|x86_64 0:2.9.7-18.el8.tuxcare.els6 x86_64 0:2.9.7-18.el8.tuxcare.els6 x86_64 0:7.2.24-1.module_el8+2292+16ea8f95.tuxcare.els14 i686|x86_64 0:4.13-4.el8.tuxcare.els1 x86_64 0:4.13-4.el8.tuxcare.els1 (^4\.18\.0\-553\.(\d{2,}|[6-9])(?:\.(\d{2,}|[1-9]))?\.el8_10\.tuxcare(\.(\d*))?(\.els(\d{2,}))?\.(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els10 i686|x86_64 0:3.6.16-8.el8.1.tuxcare.els1 x86_64 0:3.6.16-8.el8.1.tuxcare.els1 x86_64 0:8.0.42-1.module_el8+2294+36325694.tuxcare.els1 x86_64 0:8.0p1-24.el8.tuxcare.els2 x86_64 0:0.10.3-7.24.el8.tuxcare.els2 x86_64 0:2.43.0-1.el8.tuxcare.els3 0:2.43.0-1.el8.tuxcare.els3 x86_64 0:3.1.3-19.el8.1.tuxcare.els5 0:3.1.3-19.el8.1.tuxcare.els5 x86_64 4:5.26.3-422.el8.tuxcare.els1 0:0.99-422.el8.tuxcare.els1 x86_64 0:1.26-422.el8.tuxcare.els1 0:1.06-422.el8.tuxcare.els1 x86_64 0:1.28-422.el8.tuxcare.els1 0:1.34-422.el8.tuxcare.els1 x86_64 0:1.38-422.el8.tuxcare.els1 1:1.10-422.el8.tuxcare.els1 1:0.21-422.el8.tuxcare.els1 0:1.59-422.el8.tuxcare.els1 0:1.03-422.el8.tuxcare.els1 1:0.08-422.el8.tuxcare.els1 0:2.55-422.el8.tuxcare.els1 0:1.22.02-422.el8.tuxcare.els1 0:1.23-422.el8.tuxcare.els1 0:1.30-422.el8.tuxcare.els1 x86_64 0:1.31-422.el8.tuxcare.els1 i686|x86_64 4:5.26.3-422.el8.tuxcare.els1 4:5.26.3-422.el8.tuxcare.els1 0:1.11-422.el8.tuxcare.els1 0:5.26.3-422.el8.tuxcare.els1 x86_64 0:2.28-251.el8.2.tuxcare.els2 i686|x86_64 0:2.28-251.el8.2.tuxcare.els2 0:2.28-251.el8.2.tuxcare.els2 x86_64 0:7.61.1-34.el8.tuxcare.els2 i686|x86_64 0:7.61.1-34.el8.tuxcare.els2 x86_64 1:1.1.1k-12.el8.tuxcare.els2 i686|x86_64 1:1.1.1k-12.el8.tuxcare.els2 x86_64 0:1.9.5p2-1.el8.tuxcare.els1 x86_64 0:2.43.0-1.el8.tuxcare.els5 0:2.43.0-1.el8.tuxcare.els5 i686|x86_64 0:2.9.7-18.el8.tuxcare.els7 x86_64 0:2.9.7-18.el8.tuxcare.els7 i686|x86_64 0:1.3.1-33.el8.tuxcare.els2 i686|x86_64 0:2.56.4-163.el8.tuxcare.els1 0:2.56.4-163.el8.tuxcare.els1 x86_64 0:2.56.4-163.el8.tuxcare.els1 x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els11 x86_64 1:1.8.0.462.b08-1.el8.tuxcare.els1 1:1.8.0.462.b08-1.el8.tuxcare.els1 x86_64 0:7.2.24-1.module_el8+2302+91fa8810.tuxcare.els15 i686|x86_64 0:2.56.4-163.el8.tuxcare.els2 0:2.56.4-163.el8.tuxcare.els2 x86_64 0:2.56.4-163.el8.tuxcare.els2 x86_64 0:3.26.0-19.el8.tuxcare.els1 i686|x86_64 0:3.26.0-19.el8.tuxcare.els1 0:3.26.0-19.el8.tuxcare.els1 x86_64 4:20250512-2.el8.tuxcare.els1 x86_64 0:2.43.0-1.el8.tuxcare.els6 0:2.43.0-1.el8.tuxcare.els6 i686|x86_64 0:2.9.7-18.el8.tuxcare.els8 x86_64 0:2.9.7-18.el8.tuxcare.els8 (^4\.18\.0\-553\.(\d{2,}|[6-9])(?:\.(\d{2,}|[1-9]))?\.el8_10\.tuxcare(\.(\d*))?(\.els(\d{3,}|[2-9]\d|1[2-9]))?\.(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els12 x86_64 0:2.43.0-1.el8.tuxcare.els7 0:2.43.0-1.el8.tuxcare.els7 x86_64 0:2.28-251.el8.2.tuxcare.els3 i686|x86_64 0:2.28-251.el8.2.tuxcare.els3 0:2.28-251.el8.2.tuxcare.els3 x86_64 4:5.26.3-422.el8.tuxcare.els2 0:0.99-422.el8.tuxcare.els2 x86_64 0:1.26-422.el8.tuxcare.els2 0:1.06-422.el8.tuxcare.els2 x86_64 0:1.28-422.el8.tuxcare.els2 0:1.34-422.el8.tuxcare.els2 x86_64 0:1.38-422.el8.tuxcare.els2 1:1.10-422.el8.tuxcare.els2 1:0.21-422.el8.tuxcare.els2 0:1.59-422.el8.tuxcare.els2 0:1.03-422.el8.tuxcare.els2 1:0.08-422.el8.tuxcare.els2 0:2.55-422.el8.tuxcare.els2 0:1.22.02-422.el8.tuxcare.els2 0:1.23-422.el8.tuxcare.els2 0:1.30-422.el8.tuxcare.els2 x86_64 0:1.31-422.el8.tuxcare.els2 i686|x86_64 4:5.26.3-422.el8.tuxcare.els2 4:5.26.3-422.el8.tuxcare.els2 0:1.11-422.el8.tuxcare.els2 0:5.26.3-422.el8.tuxcare.els2 \nstream\s*=\s*1\.10\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*1\.10\b i686|x86_64 0:1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 0:1.10.2-5.module_el8+2308+2a518522.tuxcare.els1 i686|x86_64 0:3.6.16-8.el8.1.tuxcare.els2 x86_64 0:3.6.16-8.el8.1.tuxcare.els2 x86_64 0:2.43.0-1.el8.tuxcare.els8 0:2.43.0-1.el8.tuxcare.els8 (^4\.18\.0\-553\.(\d{2,}|[6-9])(?:\.(\d{2,}|[1-9]))?\.el8_10\.tuxcare(\.(\d*))?(\.els(\d{3,}|[2-9]\d|1[3-9]))?\.(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els13 0:2.18-399.el8.tuxcare.els1 \nstream\s*=\s*2\.4\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*2\.4\b x86_64 0:2.4.37-64.module_el8+2311+86be6a38.tuxcare.els3 0:2.4.37-64.module_el8+2311+86be6a38.tuxcare.els3 x86_64 1:2.4.37-64.module_el8+2311+86be6a38.tuxcare.els3 i686|x86_64 0:0.9.6-14.el8.tuxcare.els1 0:0.9.6-14.el8.tuxcare.els1 i686|x86_64 0:0.9.6-14.el8.tuxcare.els2 0:0.9.6-14.el8.tuxcare.els2 i686|x86_64 0:3.6.16-8.el8.1.tuxcare.els3 x86_64 0:3.6.16-8.el8.1.tuxcare.els3 x86_64 1:2.2.6-57.el8.tuxcare.els2 i686|x86_64 1:2.2.6-57.el8.tuxcare.els2 1:2.2.6-57.el8.tuxcare.els2 x86_64 1:1.1.1k-12.el8.tuxcare.els3 i686|x86_64 1:1.1.1k-12.el8.tuxcare.els3 x86_64 0:2.28-251.el8.2.tuxcare.els4 i686|x86_64 0:2.28-251.el8.2.tuxcare.els4 0:2.28-251.el8.2.tuxcare.els4 i686|x86_64 0:3.6.16-8.el8.1.tuxcare.els4 x86_64 0:3.6.16-8.el8.1.tuxcare.els4 \nstream\s*=\s*4\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*4\b x86_64 7:4.15-10.module_el8+2314+6d353102.tuxcare.els3 (^4\.18\.0\-553\.(\d{2,}|[6-9])(?:\.(\d{2,}|[1-9]))?\.el8_10\.tuxcare(\.(\d*))?(\.els(\d{3,}|[2-9]\d|1[4-9]))?\.(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els14 x86_64 32:9.11.36-13.el8.tuxcare.els6 i686|x86_64 32:9.11.36-13.el8.tuxcare.els6 32:9.11.36-13.el8.tuxcare.els6 x86_64 1:2.2.6-57.el8.tuxcare.els3 i686|x86_64 1:2.2.6-57.el8.tuxcare.els3 1:2.2.6-57.el8.tuxcare.els3 x86_64 1:1.8.0.472.b08-1.el8.tuxcare.els1 1:1.8.0.472.b08-1.el8.tuxcare.els1 x86_64 0:2.30-123.el8.tuxcare.els3 i686|x86_64 0:2.30-123.el8.tuxcare.els3 x86_64 1:11.0.29.0.7-1.el8.tuxcare.els1 x86_64 0:8.0p1-24.el8.tuxcare.els4 x86_64 0:0.10.3-7.24.el8.tuxcare.els4 i686|x86_64 0:2.5.0-1.el8.tuxcare.els1 x86_64 0:2.5.0-1.el8.tuxcare.els1 \nstream\s*=\s*2\.7\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*2\.7\b x86_64 0:2.7.18-17.module_el8+2327+18e1493b.tuxcare.els4 x86_64 0:2.4.37-64.module_el8+2325+f303b1da.tuxcare.els4 0:2.4.37-64.module_el8+2325+f303b1da.tuxcare.els4 x86_64 1:2.4.37-64.module_el8+2325+f303b1da.tuxcare.els4 x86_64 0:1.16.2-5.el8.tuxcare.els1 i686|x86_64 0:1.16.2-5.el8.tuxcare.els1 x86_64 0:1.16.2-5.el8.tuxcare.els2 i686|x86_64 0:1.16.2-5.el8.tuxcare.els2 x86_64 0:1.16.2-5.el8.tuxcare.els3 i686|x86_64 0:1.16.2-5.el8.tuxcare.els3 x86_64 0:2.43.0-1.el8.tuxcare.els9 0:2.43.0-1.el8.tuxcare.els9 \nstream\s*=\s*8\.0\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*8\.0\b x86_64 0:8.0.44-1.module_el8+2332+8b740e98.tuxcare.els1 x86_64 0:2.4.37-64.module_el8+2338+ca31203e.tuxcare.els5 0:2.4.37-64.module_el8+2338+ca31203e.tuxcare.els5 x86_64 1:2.4.37-64.module_el8+2338+ca31203e.tuxcare.els5 x86_64 0:7.61.1-34.el8.tuxcare.els3 i686|x86_64 0:7.61.1-34.el8.tuxcare.els3 x86_64 0:2.2.20-3.el8.tuxcare.els1 \nstream\s*=\s*7\.2\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*7\.2\b x86_64 0:7.2.24-1.module_el8+2335+3d658739.tuxcare.els16 x86_64 0:1.16.2-5.el8.tuxcare.els4 i686|x86_64 0:1.16.2-5.el8.tuxcare.els4 x86_64 0:2.7.18-17.module_el8+2347+4c303855.tuxcare.els5 i686|x86_64 0:2.56.4-163.el8.tuxcare.els3 0:2.56.4-163.el8.tuxcare.els3 x86_64 0:2.56.4-163.el8.tuxcare.els3 x86_64 1:2.2.6-57.el8.tuxcare.els4 i686|x86_64 1:2.2.6-57.el8.tuxcare.els4 1:2.2.6-57.el8.tuxcare.els4 (^4\.18\.0\-553\.(\d{2,}|[6-9])(?:\.(\d{2,}|[1-9]))?\.el8_10\.tuxcare(\.(\d*))?(\.els(\d{3,}|[2-9]\d|1[5-9]))?\.(x86_64|i686)$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els15 x86_64 1:1.8.0.482.b08-1.el8.tuxcare.els1 1:1.8.0.482.b08-1.el8.tuxcare.els1 i686|x86_64 0:2.5.0-1.el8.tuxcare.els2 x86_64 0:2.5.0-1.el8.tuxcare.els2 x86_64 1:1.1.1k-12.el8.tuxcare.els4 i686|x86_64 1:1.1.1k-12.el8.tuxcare.els4 i686|x86_64 0:2.56.4-163.el8.tuxcare.els4 0:2.56.4-163.el8.tuxcare.els4 x86_64 0:2.56.4-163.el8.tuxcare.els4 x86_64 0:2.7.18-17.module_el8+2352+bd84b602.tuxcare.els7 x86_64 1:1.1.1k-12.el8.tuxcare.els5 i686|x86_64 1:1.1.1k-12.el8.tuxcare.els5 1:2.02-129.el8.tuxcare.els6 x86_64 1:2.02-129.el8.tuxcare.els6 x86_64 0:7.2.24-1.module_el8+2355+7fe58b99.tuxcare.els16 x86_64 0:2.7.18-17.module_el8+2359+e28744d6.tuxcare.els8 i686|x86_64 0:3.6.8-62.el8.tuxcare.els1 x86_64 0:3.6.8-62.el8.tuxcare.els1 i686|x86_64 0:3.6.8-62.el8.tuxcare.els4 x86_64 0:3.6.8-62.el8.tuxcare.els4 x86_64 0:7.2.24-1.module_el8+2360+c221bed0.tuxcare.els18 (^4\.18\.0\-((?:(?:\d{4,}|[6-9]\d{2}|5[6-9]\d|55[4-9])(?:\.\d+)*|553\.(?:\d{2,}|[7-9])(?:\.\d+)*|553\.6\.(?:\d{2,}|[2-9])(?:\.\d+)*|553\.6\.1\.\d+(?:\.\d+)*)\.el8_10\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:553\.6\.1)\.el8_10\.tuxcare(?:\.\d+)?(?:\.els(?:\d{3,}|[2-9]\d|1[6-9]))?\.(?:x86_64|i686))$) x86_64 0:4.18.0-553.6.1.el8_10.tuxcare.els16 x86_64 0:7.61.1-34.el8.tuxcare.els4 i686|x86_64 0:7.61.1-34.el8.tuxcare.els4