CLSA-2026-1779531839 Update of exim

Rebuilt with rebrand to TuxCare ELS...

CLSA-2026-1779531651 Update of exim

Rebuilt with rebrand to TuxCare ELS...

CLSA-2026-1779202006 Fix CVE(s): CVE-2026-43284, CVE-2026-46300, CVE-2026-46333

Ubuntu: 4.15.0-256.267 CVE-2026-46333 - ptrace: require CAPSYSPTRACE when task has no mm CVE-2026-46333 CVE-2026-46300 - net: skbuff: propagate shared-frag marker through copy/coalesce/gro/shift paths CVE-2026-46300 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags...

CLSA-2026-1779182426 buildah: Fix of CVE-2026-32283

rebuild on tuxcare9.6esu with newer golang version 1.25.7-1.el96.tuxcare.els4 - CVE-2026-32283: fix TLS 1.3 deadlock in crypto/tls handleKeyUpdate...

CLSA-2026-1778268804 Update of java-1.8.0-openjdk

Fix release version format: place .el9 before .tuxcare.els1 suffix; bump rpmrelease to 2...

CLSA-2026-1778261513 Update of alt-php

Miscellaneous Ubuntu changes - Packaging: add tuxcare suffix Miscellaneous upstream changes - xfrm: esp: avoid in-place decrypt on shared skb frags - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present...

CLSA-2026-1777636990 Fix of 9 CVEs

CVE-2026-31431 - crypto: scatterwalk - Backport memcpysglist CVE-2026-31431 - crypto: algifaead - use memcpysglist instead of null skcipher CVE-2026-31431 - crypto: algifaead - Revert to operating out-of-place CVE-2026-31431 - crypto: algifaead - snapshot IV for async AEAD requests CVE-2026-31431...

CLSA-2026-1777539510 Update of pcre2

Rebuild for tuxcare9.6esu...

CLSA-2026-1777366733 python3: Fix of CVE-2026-1299

CVE-2026-1299: reject newline injection in email module's BytesGenerator when serializing headers - Skip test.testxmletree.XMLPullParserTest.testsimplexml during RPM build; unrelated expat-2.1.0-15.0.7.tuxcare.els1 regression breaks XMLPullParser chunked-feed semantics in TuxCare ELS el7 build...

CLSA-2026-1768479757 Update of mysql

use 8.0.44-1 update for tuxcare 9.6...

MiracleLinux 7 : emacs-24.3-23.1.0.4.el7.AXS7 (AXSA:2025-11265:08)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11265:08 advisory. Bump release to 23.0.1.1.tuxcare.els1 CVEs: CVE-2025-1244 A command injection flaw was found in the text editor Emacs. It could allow a remote,...

CLSA-2025-1765287627 Update of postgresql

Bump release to 9.2.24-9.0.3.tuxcare.els1...

CLSA-2025-1764850038 Update of emacs

Bump release to 23.0.1.1.tuxcare.els1...

CLSA-2025-1764082387 podman: Fix of CVE-2025-47907

Rebuild with golang = 1.22.5-1.el92.tuxcare.els6 to address CVE-2025-47907...

CLSA-2025-1760646561 tigervnc: Fix of 13 CVEs

Rebuilt with xorg-x11-server-1.20.4-99.el79.tuxcare.els7, mitigating the security vulnerabilities identified by the following CVEs: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600 and CVE-2025-26601, CVE-2025-49175, CVE-2025-49176,...

CLSA-2025-1751552694 Update of shim

Use both AlmaLinux and CloudLinux certs for checking images - Debrand to TuxCare - No SB support for aarch64 on TuxCare yet...

CLSA-2024-1734635951 Update of python3

Update version to 3.6.8-21.0.1.tuxcare.els1...

CLSA-2024-1720777265 Update of linux-firmware

Repack the linux-firmware to keep tuxcare updates...

CLSA-2024-1717139314 bind: Fix of 2 CVEs

Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3...

CLSA-2024-1712837970 Update of microcode_ctl

Moved tuxcare patches from 2:2.1-73.16.tuxcare.els1 - genupdate2.py was updated to output strings having restricted length - Update Intel CPU microcode to microcode-20231114 release it's the same as microcode-20231009 - Update vendor patches...