Tuxcare Errata System 0.0.1 5.10 2026-10-23T20:49:46 Amazon Linux 2 - CVE-2018-16869: fix side-channel padding oracle in RSA decryption - CVE-2021-3580: add input validation to rsa_decrypt family of functions Important TuxCare License Agreement CVE-2018-16869 CVE-2021-3580 Amazon Linux 2 - CVE-2016-9840: fix improper pointer arithmetic in inftrees.c - CVE-2016-9843: fix pre-decrement pointer in crc32_big in crc32.c Critical TuxCare License Agreement CVE-2016-9840 CVE-2016-9843 Amazon Linux 2 - CVE-2022-25313: prevent stack exhaustion in build_model - CVE-2024-50602: make XML_StopParser refuse to stop/suspend an unstarted parser Critical TuxCare License Agreement CVE-2024-45491 CVE-2026-24515 CVE-2024-45492 Amazon Linux 2 - CVE-2024-0553: timing side-channel in RSA-PSK key exchange - CVE-2023-5981: side-channel in RSA-PSK authentication Important TuxCare License Agreement CVE-2024-0553 Amazon Linux 2 - CVE-2017-9233: fix external entity infinite loop in entityValueInitProcessor and entityValueProcessor - CVE-2023-52425: add reparse deferral heuristic to prevent O(n^2) parsing of large tokens in small buffer refills; fix buffer growth calculation - CVE-2013-0340: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) - CVE-2024-28757: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) Important TuxCare License Agreement CVE-2023-52425 CVE-2024-28757 CVE-2013-0340 CVE-2017-9233 Amazon Linux 2 - Fix test_deeply_nested_content_model test on 32 bit systems caused by CVE-2026-4224.patch - Add explicit IPv6 group-length validation in CVE-2024-11168.patch (_check_bracketed_host) to fix test_check_bracketed_host failure on i686 where platform inet_pton is lenient about group length Important TuxCare License Agreement CVE-2025-13836 CVE-2024-6232 CVE-2022-48560 Amazon Linux 2 - CVE-2018-5744: fix memory leak when processing messages with duplicate keytag EDNS options Important TuxCare License Agreement CVE-2018-5744 Amazon Linux 2 - CVE-2019-9641: fix integer overflows in exif_process_IFD_in_TIFF on 32-bit - CVE-2019-9023: fix heap buffer over-reads in oniguruma multibyte parsing Critical TuxCare License Agreement CVE-2019-9021 CVE-2019-9641 CVE-2018-7584 CVE-2017-9224 CVE-2019-9020 CVE-2019-9023 Amazon Linux 2 - CVE-2021-20313: fix sensitive data leak in TransformSignature - CVE-2021-20311: fix divide by zero in RGBTransformImage - CVE-2021-20312: fix integer overflow in WriteTHUMBNAILImage - CVE-2025-62171: fix integer overflow in BMP decoder Important TuxCare License Agreement CVE-2025-62171 CVE-2021-20313 CVE-2021-20311 CVE-2021-20312 Amazon Linux 2 - fix CVE-2025-57803: integer overflow in ReadBMPImage via unguarded bytes_per_line calculation Important TuxCare License Agreement CVE-2025-57803 Amazon Linux 2 - Fix CVE-2026-25897: integer overflow in Sun decoder on 32-bit systems Critical TuxCare License Agreement CVE-2026-25897 Amazon Linux 2 - CVE-2021-23240: fix race condition in selinux_edit_copy_tfiles allowing privilege escalation via symlink attack - CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks Important TuxCare License Agreement CVE-2021-23240 CVE-2023-42465 Amazon Linux 2 - Fix CVE-2017-7375: add validation for parsed entity references in xmlParsePEReference - Fix CVE-2017-7376: fix buffer overflow in URL port handling - Fix CVE-2024-25062: use-after-free in xmlreader with DTD validation and XInclude Critical TuxCare License Agreement CVE-2017-7375 CVE-2017-7376 CVE-2024-25062 Amazon Linux 2 - CVE-2018-8740: NULL pointer dereference in sqlite3EndTable() when the sqlite_master schema is corrupted with a CREATE TABLE AS entry - CVE-2018-20346: integer overflow in the FTS3 segment reader path (fts3ScanInteriorNode, fts3SegReaderNext) on crafted shadow table data - CVE-2018-20506: heap corruption in the FTS3 merge path (nodeReaderNext) triggered by a crafted FTS3 shadow table Important TuxCare License Agreement CVE-2018-8740 CVE-2018-20506 CVE-2018-20346 Amazon Linux 2 - CVE-2024-38428: fix userinfo parsing in url_skip_credentials() per RFC 2396 Critical TuxCare License Agreement CVE-2024-38428 Amazon Linux 2 - CVE-2016-10195: fix remote stack overread in evdns name_parse() Critical TuxCare License Agreement CVE-2016-10195 Amazon Linux 2 - CVE-2019-18276: when effective UID is not equal to its real UID the saved UID is not dropped Important TuxCare License Agreement CVE-2019-18276 Amazon Linux 2 - CVE-2018-14882: icmp6 rpl missing bounds check buffer over-read - CVE-2018-14464: add missing bounds check in lmp_print_data_link_subobjs - CVE-2019-15166: lmp_print_data_link_subobjs missing bounds checks (covered by the same backport) - CVE-2018-14461: ldp fix bounds check in ft session tlv - CVE-2018-16301: reject -F files larger than INT_MAX in read_infile Important TuxCare License Agreement CVE-2018-14469 CVE-2018-14880 CVE-2018-16230 CVE-2018-14463 CVE-2018-16300 CVE-2018-14882 CVE-2018-14464 CVE-2018-14461 CVE-2018-16301 CVE-2019-15166 Amazon Linux 2 - CVE-2018-10103: disable possibly-buggy SMB printer by default - CVE-2018-10105: disable possibly-buggy SMB printer by default Critical TuxCare License Agreement CVE-2018-10103 CVE-2018-10105 Amazon Linux 2 - CVE-2018-16229: dccp buffer over-read in timestamp options - CVE-2018-14466: fix rx parser over-read in serviceId - CVE-2018-16452: cap smb_fdata recursion to prevent stack exhaustion - CVE-2018-16451: add missing bounds checks in smb print_trans() - CVE-2018-16228: already mitigated upstream by Patch0015 (filename references the unrelated CVE-2018-19519 but its body is the HNCP print_prefix fix) Important TuxCare License Agreement CVE-2018-16229 CVE-2018-14466 CVE-2018-16452 CVE-2018-16451 CVE-2018-16228 Amazon Linux 2 - CVE-2024-12086: prevent server from reading arbitrary client files via path traversal - CVE-2025-10158: fix invalid access to files array in sender - Add upstream stability fix (RsyncProject/rsync PR #706): use-after-free in generator - Enable Amazon Linux 2 ELS Moderate TuxCare License Agreement CVE-2024-12086 Amazon Linux 2 - CVE-2018-14462: add missing bounds check in icmp_print() before reading icmp_cksum - CVE-2018-14881: bgp parser buffer over-read in bgp_capabilities_print() (BGP_CAPCODE_RESTART) - CVE-2018-14879: fix buffer overflow in get_next_file() command-line parser - CVE-2018-16227: ieee 802.11 parser missing bounds check on mesh flags subfield Important TuxCare License Agreement CVE-2018-14467 CVE-2018-14468 CVE-2018-14470 CVE-2018-14465 CVE-2018-14462 CVE-2018-14881 CVE-2018-14879 CVE-2018-16227 Amazon Linux 2 - CVE-2026-3441: bounds-check XTY_LD x_scnlen csect index in xcoff_link_add_symbols to prevent heap-based out-of-bounds read - CVE-2026-3442: validate r_symndx before sym_hashes[] indexing in xcoff_link_add_symbols to prevent out-of-bounds read Important TuxCare License Agreement CVE-2026-3442 CVE-2022-47695 CVE-2017-17121 CVE-2023-25584 CVE-2018-19931 CVE-2017-17122 CVE-2021-45078 CVE-2017-17125 CVE-2017-16831 CVE-2020-35342 CVE-2022-47696 CVE-2022-44840 CVE-2017-16828 CVE-2017-16826 CVE-2017-16827 CVE-2025-5244 CVE-2026-3441 CVE-2017-17124 CVE-2017-16832 CVE-2022-47673 CVE-2025-5245 Amazon Linux 2 - CVE-2017-16548: enforce trailing NUL on received xattr names in receive_xattr() - CVE-2017-17434: sanitize xname strings in read_ndx_and_attrs() and check fnamecmp against the daemon filter list Critical TuxCare License Agreement CVE-2017-16548 CVE-2017-17434 Amazon Linux 2 - CVE-2018-10546: fail on invalid multibyte sequences in iconv stream filter - CVE-2018-10548: fix NULL pointer dereference in ldap_get_dn return handling - CVE-2018-14883: fix integer overflow in exif_thumbnail_extract bounds check - CVE-2018-20783: add bounds checks to phar manifest header reads - CVE-2019-6977: fix out of bounds write in gdImageColorMatch palette buffer - CVE-2019-9637: harden cross-device rename umask, chown and chmod ordering - CVE-2019-9638: fix uninitialized read in exif_process_IFD_in_MAKERNOTE Important TuxCare License Agreement CVE-2018-20783 CVE-2018-10546 CVE-2018-10548 CVE-2018-14883 CVE-2019-6977 CVE-2019-9638 CVE-2019-9637 Amazon Linux 2 - CVE-2019-13012: fix insecure permissions in GKeyfile settings backend when creating directories and writing settings files Important TuxCare License Agreement CVE-2019-13012 Amazon Linux 2 - CVE-2026-28388: NULL pointer dereference in check_delta_base() when a delta CRL omits the required CRL Number extension - CVE-2026-28389: NULL pointer dereference in dh_cms_set_shared_info() and ecdh_cms_set_shared_info() when the CMS KeyEncryptionAlgorithmIdentifier parameter field is omitted - CVE-2026-28390: NULL pointer dereference in rsa_cms_decrypt() when the CMS RSA-OAEP pSourceFunc parameter field is omitted Important TuxCare License Agreement CVE-2026-28389 CVE-2026-28390 CVE-2026-28388 Amazon Linux 2 - CVE-2019-5815: fix dangling pointer / type confusion in xsltNumberFormatGetMultipleLevel by saving and restoring the XPath context node around xmlXPathNext* iterator calls Important TuxCare License Agreement CVE-2019-5815 Amazon Linux 2 - CVE-2020-12658: gssproxy worker thread exits while holding cond_mutex, leaving the lock held and stalling subsequent thread shutdown Critical TuxCare License Agreement CVE-2020-12658 Amazon Linux 2 - CVE-2025-69720: add limit-check in infocmp -i to prevent buffer overflow in analyze_string() when a sibling string capability exceeds MAX_TERMINFO_LENGTH Important TuxCare License Agreement CVE-2025-69720 Amazon Linux 2 - CVE-2019-16866: fix uninitialized memory read on crafted NOTIFY query Important TuxCare License Agreement CVE-2019-16866 Amazon Linux 2 - CVE-2018-12015: Archive::Tar path traversal - remove existing block-device or out-of-CWD symlink targets before overwriting during extraction Important TuxCare License Agreement CVE-2018-12015 Amazon Linux 2 - CVE-2018-1123: ps DoS via outbuf overflows in pr_args/pr_comm/pr_fname caused by passing literal OUTBUF_SIZE instead of remaining buffer size - CVE-2018-1125: pgrep stack-buffer overflow in cmdline assembly via strncpy/strncat loop with int-bytes wraparound Important TuxCare License Agreement CVE-2018-1123 CVE-2018-1125 Amazon Linux 2 - CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support Important TuxCare License Agreement CVE-2020-14342 Amazon Linux 2 - CVE-2018-5764: prevent client from resetting protect_args during the second parse_arguments pass on the daemon Important TuxCare License Agreement CVE-2018-5764 Amazon Linux 2 - CVE-2016-10196: fix stack-based buffer overflow in evutil_parse_sockaddr_port - CVE-2016-10197: fix DoS via empty hostname in search_make_new Important TuxCare License Agreement CVE-2016-10196 CVE-2016-10197 Amazon Linux 2 - Import CVE-2026-5121 (zisofs pz_log2_bs validation) from amzn2 stock 0.6 - Bump amzn_buildid to .6 to leapfrog amzn2 stock 3.1.2-14.amzn2.0.6 Important TuxCare License Agreement CVE-2021-23177 CVE-2025-25724 Amazon Linux 2 - CVE-2018-21010: heap buffer overflow in color_apply_icc_profile when RGB components have differing widths or heights; reject such inputs after cleaning up the LCMS transform handle and profiles. Important TuxCare License Agreement CVE-2018-21010 Amazon Linux 2 - CVE-2020-27153: use-after-free in shared/att.c when bt_att_cancel is called from a disc_att_send_op callback during disconnect Important TuxCare License Agreement CVE-2020-27153 Amazon Linux 2 - Leapfrog amzn2 stock 0.26 (override Amazon's 6.9.10.97-1.amzn2.0.26 release) - Import CVE-2026-{33535/33536} from amzn2 stock 0.24 - Import CVE-2026-{33899/33908/40169/40310/40311/40312} from amzn2 stock 0.25 - Replace TuxCare CVE-2026-33905.patch with Amazon's two-part split CVE-2026-33905_{0/1}.patch, functionally equivalent, same upstream commits 140fc7b and 8d73954b - Skip CVE-2026-33901 patch shipped in amzn2 stock 0.25, since amzn2 stock 0.26 reverted it Important TuxCare License Agreement CVE-2026-33535 CVE-2026-40310 CVE-2026-33536 CVE-2026-33905 CVE-2026-40169 CVE-2026-40312 CVE-2026-40311 Amazon Linux 2 - CVE-2025-32365: fix out-of-bounds read in JBIG2Bitmap::combine due to misplaced isOk check Important TuxCare License Agreement CVE-2025-32365 Amazon Linux 2 - CVE-2026-26269: stack buffer overflow in netbeans special_keys() - CVE-2026-28417: OS command injection via crafted netrw URL - CVE-2026-28421: heap-buffer-overflow / SEGV in swap file recovery - CVE-2026-33412: command injection in glob() via shell newline - CVE-2026-39881: OS command injection in netbeans defineAnnoType Important TuxCare License Agreement CVE-2026-39881 CVE-2026-28417 CVE-2026-33412 CVE-2026-26269 CVE-2026-28421 Amazon Linux 2 - CVE-2019-19906: fix off-by-one heap write in _sasl_add_string Important TuxCare License Agreement CVE-2019-19906 Amazon Linux 2 - CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check Important TuxCare License Agreement CVE-2026-4786 Amazon Linux 2 - CVE-2026-4878: TOCTOU race in cap_set_file() allowed an attacker to swap the target with a symlink between path lookup and xattr write; perform xattr writes via an O_NOFOLLOW/O_PATH file descriptor instead of the user-supplied path Important TuxCare License Agreement CVE-2026-4878 Amazon Linux 2 - CVE-2024-45802: disable ESI processor to prevent DoS via input validation and resource lifetime bugs in ESI handling Important TuxCare License Agreement CVE-2024-45802 Amazon Linux 2 - CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request Important TuxCare License Agreement CVE-2026-5119 Amazon Linux 2 - CVE-2021-3618: fix HTTP/TLS cross-protocol confusion (ALPACA), backport from 8.17.1 Important TuxCare License Agreement CVE-2021-3618 Amazon Linux 2 - Add Amazon Linux 2 ELS support (mirrors centos7els branch with .amzn2 dist via .0/.1 leapfrog over stock 1.900.1-33.amzn2.0.1) - Import CVE-2020-27828 patch from amzn2 stock SRPM (out-of-bounds write in jpc encoder; jasper-2.0.14-CVE-2020-27828.patch) - Import CVE-2021-3443 patch from amzn2 stock SRPM (NULL pointer dereference in JP2 component reference handling) - Import CVE-2021-3467 patch from amzn2 stock SRPM (NULL pointer dereference in CDEF box channel reference handling) Important TuxCare License Agreement CVE-2025-8836 CVE-2021-26926 CVE-2023-51257 CVE-2025-8837 CVE-2020-27828 Amazon Linux 2 - CVE-2026-7598: integer overflow in userauth_password() and userauth_list() username_len allows out-of-bounds memory write - Skip mansyntax.sh test Low TuxCare License Agreement CVE-2026-7598 Amazon Linux 2 - CVE-2023-52355: cap libtiff allocations via TIFFOpenOptionsSetMaxSingleMemAlloc and add -M memory-limit option to tiff2ps, tiffcp, tiffinfo, and tiffsplit so that crafted TIFF files can no longer trigger out-of-memory denial of service Important TuxCare License Agreement CVE-2023-52355 Amazon Linux 2 - CVE-2025-0167: .netrc parser leaks 'default' credentials across redirects because parsenetrc() returns NETRC_SUCCESS for a 'default' block that carries no login/password, letting the caller mark the connection as netrc-sourced and reuse stale credentials on follow-ups - Fix internal testing on i686 Low TuxCare License Agreement CVE-2025-0167 Amazon Linux 2 - CVE-2022-0934: Fix write-after-free in DHCPv6 relay handling that could be triggered by a crafted packet, leading to denial of service - rfc3315: fix bad reply to DHCPCONFIRM messages (wrong message type) - rfc3315: fix integer underflow and heap overflow in log6_opts STATUS_CODE - rfc3315: fix DHCPv6 "use multicast" response which previously failed Important TuxCare License Agreement CVE-2022-0934 Amazon Linux 2 - Rebase onto Amazon Linux 2 7.4p1-22.amzn2.0.12 (ALAS2-2026-3262 / CVE-2026-35385) so the TuxCare ELS package is not superseded by the upstream security update - CVE-2026-35414: rewrite match_principals_option() to split the authorized_keys principals="" list with strsep() and exact-match each entry against cert->principals[i], so that certificate principals containing comma characters are matched correctly Important TuxCare License Agreement CVE-2026-35385 Amazon Linux 2 - CVE-2018-14651: server: don't allow '/' in basename Important TuxCare License Agreement CVE-2018-14651 Amazon Linux 2 - CVE-2019-1010180: fix bfd library out-of-bounds read on ELF section size larger than file size Important TuxCare License Agreement CVE-2019-1010180 Amazon Linux 2 - CVE-2026-6735: escape proc->request_uri before emitting it on the PHP-FPM status page to block stored XSS via crafted request URIs Moderate TuxCare License Agreement CVE-2026-6735 Amazon Linux 2 - CVE-2018-13410: off-by-one in malloc size for unzip command buffer used by -T/-TT (Info-ZIP Zip 3.0) Critical TuxCare License Agreement CVE-2018-13410 Amazon Linux 2 - CVE-2026-34059: fix ajp_parse_data message length check - CVE-2026-29169: fix mod_dav_lock NULL deref - CVE-2026-33006: fix mod_auth_digest timing attack - CVE-2026-24072: restrict ap_expr in htaccess - CVE-2026-33523: scan outgoing status line for newlines and controls - CVE-2026-33857: fix length checks in AJP msg_get functions - CVE-2026-34032: fix ajp_msg_get_string buffer checks - CVE-2026-33007: validate URL earlier in mod_authn_socache - CVE-2026-28780: fix ajp_msg_check_header boundary check (companion to CVE-2026-33857) Important TuxCare License Agreement CVE-2026-34059 CVE-2026-29169 CVE-2026-33006 CVE-2026-24072 CVE-2026-33523 CVE-2026-33857 CVE-2026-34032 CVE-2026-28780 CVE-2026-33007 Amazon Linux 2 - CVE-2020-35492: stack buffer overflow in _inplace_src_spans() in src/cairo-image-compositor.c via a crafted input file causing out-of-bounds write through the r->_buf stack mask pointer Important TuxCare License Agreement CVE-2020-35492 Amazon Linux 2 - CVE-2026-43964: buffer over-read in dsn_split() due to off-by-one cursor advance when an enhanced status code is not followed by additional text Important TuxCare License Agreement CVE-2026-43964 Amazon Linux 2 - CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote entry value handling - CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote handling - CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size checks Important TuxCare License Agreement CVE-2026-40386 CVE-2026-40385 CVE-2026-32775 Amazon Linux 2 - Extend platform coverage to amazonlinux2els - Include amzn2 test-build patches: Fix-warnings-in-test_flacpicture.patch, taglib-1.8-fix-cxx11.patch (test suite only, no runtime change) Important TuxCare License Agreement CVE-2023-47466 Amazon Linux 2 - CVE-2020-24330: drop root gid in tcsd before dropping uid - CVE-2020-24331: require tcsd.conf as root:tss with mode 0640 Important TuxCare License Agreement CVE-2020-24331 CVE-2020-24330 Amazon Linux 2 - CVE-2026-6276: when a libcurl easy handle is reused, a stale custom Host: cookiehost survives into the next request and leaks cookies meant for the spoofed host to the real peer; Curl_http_host() now Curl_safefree()s aptr->cookiehost on every entry under the existing !CURL_DISABLE_COOKIES guard Important TuxCare License Agreement CVE-2026-6276 Amazon Linux 2 - CVE-2026-4890: fix NSEC bitmap parsing infinite loop in DNSSEC validation - CVE-2026-4891: verify rdlen field in RRSIG packets - CVE-2026-4892: fix buffer overflow in helper.c with large DHCPv6 CLIDs Important TuxCare License Agreement CVE-2026-4891 CVE-2026-4892 CVE-2026-4890 Amazon Linux 2 - CVE-2026-25959: lock cache when providing data in xf_cliprdr Critical TuxCare License Agreement CVE-2026-25959 Amazon Linux 2 - CVE-2026-3833: fix case-sensitive name constraints comparison for DNS and rfc822Name Important TuxCare License Agreement CVE-2026-3833 Amazon Linux 2 - CVE-2026-5773: disable connection reuse for SMB(S) to prevent libcurl from reusing a connection to the same server for a different SMB share Important TuxCare License Agreement CVE-2026-5773 Amazon Linux 2 - CVE-2026-45186: fix quadratic runtime in attribute collision detection by using a hash table for default attribute names instead of an O(n^2) loop Important TuxCare License Agreement CVE-2026-45186 Amazon Linux 2 - CVE-2021-25329: fix Apache Tomcat session deserialization / sub-directory traversal - Apply upstream follow-up fix for File.separator vs File.pathSeparator regression Important TuxCare License Agreement CVE-2021-25329 Amazon Linux 2 - CVE-2016-6321: fix directory-traversal in safer_name_suffix by skipping archive members whose names contain '..' components during extraction Important TuxCare License Agreement CVE-2016-6321 Amazon Linux 2 - CVE-2026-7262: fix broken Apache map value NULL check in soap encoder (GHSA-hmxp-6pc4-f3vv) - CVE-2026-7568: fix signed integer overflow of char array offset in metaphone (GHSA-96wq-48vp-hh57) - CVE-2026-7261: fix use-after-free after SOAP header parsing failure with SOAP_PERSISTENCE_SESSION (GHSA-m33r-qmcv-p97q) - CVE-2026-7258: fix out-of-bounds read in urldecode() via signed-char to ctype.h (GHSA-m8rr-4c36-8gq4) - CVE-2025-14179: fix SQL injection in pdo_firebird quoter via NUL bytes in quoted strings (GHSA-w476-322c-wpvm) - CVE-2026-6722: fix stale SOAP_GLOBAL ref_map pointer with Apache Map (GHSA-85c2-q967-79q5) Critical TuxCare License Agreement CVE-2026-7262 CVE-2025-14179 CVE-2026-7258 CVE-2026-7568 CVE-2026-7261 CVE-2026-6722 Amazon Linux 2 - CVE-2026-33278: fix dangling pointer use-after-free in dns_msg_deepcopy_region(); the buggy struct-assignment overwrote the destination's freshly-allocated rrsets pointer with the source's pointer, causing the resumed validator to dereference a dangling pointer after the source region was freed. The vulnerable code was previously backported as part of CVE-2023-50868.patch (NSEC3 closest-encloser fix). - CVE-2026-33278: backport defense-in-depth NSEC3 parameter consistency check (param_set_same) from the same upstream commit; rejects NSEC3 responses mixing records from distinct cryptographic chains. Critical TuxCare License Agreement CVE-2026-33278 Amazon Linux 2 - CVE-2026-42050: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool Low TuxCare License Agreement CVE-2026-42050 Amazon Linux 2 - CVE-2026-43618: fix integer overflow in compressed-token decoder allowing remote memory disclosure via crafted compressed stream Important TuxCare License Agreement CVE-2026-43618 Amazon Linux 2 - CVE-2026-34079: fix arbitrary host file deletion via app-controlled ld.so cache symlink in flatpak_switch_symlink_and_remove Important TuxCare License Agreement CVE-2026-34079 Amazon Linux 2 - CVE-2026-29518: fix TOCTOU symlink race in daemon file handling exposed when "use chroot = no" Important TuxCare License Agreement CVE-2026-29518 Amazon Linux 2 - CVE-2026-43513: add case sensitive attribute to LockOutRealm - CVE-2026-43512: fix the handling of invalid users with DIGEST authentication - CVE-2026-43514: switch AJP secret comparison to a constant time algorithm - CVE-2026-43515: ensure RealmBase finds all matching extension based constraints - CVE-2026-41284: add a configurable limit for WebDAV XML request bodies Low TuxCare License Agreement CVE-2026-43514 CVE-2026-43512 CVE-2026-41284 CVE-2026-43515 CVE-2026-43513 Amazon Linux 2 - CVE-2019-12448: fix admin backend race in query_info_on_read/write - CVE-2019-12447: fix admin backend file ownership via fsuid - CVE-2019-12795: fix gvfs daemon D-Bus unauthenticated client access Important TuxCare License Agreement CVE-2019-12447 CVE-2019-12448 CVE-2019-12795 Amazon Linux 2 - CVE-2026-6473: integer overflow fixes across multiple vulnerable sites: formatting.c size calculations (mul_size), intarray/ltxtquery findoprnd() left-offset overflow, ltree lquery numvar/totallen overflow, and ts_headline option length overflow - CVE-2026-6474: timeofday / pg_strftime: guard against unsafe format codes and ensure null-termination on overflow - CVE-2026-6477: libpq: harden PQfn() / pqFunctionCall3 against server-controlled buffer overruns in lo_read() - CVE-2026-6478: authentication: add timingsafe_bcmp() helper and apply it in MD5 / RADIUS auth paths - CVE-2026-6637: refint contrib: prevent SQL injection and buffer overruns in check_primary_key / check_foreign_key Low TuxCare License Agreement CVE-2026-6637 CVE-2026-6473 CVE-2026-6474 CVE-2026-6477 CVE-2026-6478 Amazon Linux 2 - CVE-2026-42307: fix shell-injection in netrw via crafted sftp:// and file:// URLs by escaping the tempfile name and restricting the filename-suffix regex to word characters (runtime/autoload/netrw.vim, upstream patch 9.2.0383) Low TuxCare License Agreement CVE-2026-42307 Amazon Linux 2 - Rebase to 9.11.4-26.P2.amzn2.13.15; CVE-2026-3039 and CVE-2026-5946 fixed by vendor - Carry CVE-2018-5744 (memory leak on duplicate keytag EDNS options) Important TuxCare License Agreement CVE-2026-3039 CVE-2026-5946 Amazon Linux 2 - CVE-2026-41035: fix use-after-free in receive_xattr() qsort by using post-filter xattr count Important TuxCare License Agreement CVE-2026-41035 Amazon Linux 2 - CVE-2026-8376: fix heap buffer overflow in S_study_chunk when compiling regular expressions with a repeated fixed string on 32-bit builds (mincount * l overflow) Critical TuxCare License Agreement CVE-2026-8376 Amazon Linux 2 - rebase onto Amazon Linux 2 1.7.3-15.amzn2.0.14 (CVE-2026-42959, CVE-2026-42960, CVE-2026-44390, CVE-2026-41292, CVE-2026-42534, CVE-2026-42923, CVE-2026-33278); take AL2's six new bug-fix patches; keep the TuxCare CVE-2019-16866 and CVE-2026-33278 backports (renumbered to Patch1016/1017). Our CVE-2026-33278 fix is kept over AL2's because it is a superset: it adds the defense-in-depth NSEC3 parameter consistency check (param_set_same) on top of the same dns_msg_deepcopy_region use-after-free fix. No new TuxCare ELS work ships here. Critical TuxCare License Agreement CVE-2026-42960 CVE-2026-42959 CVE-2026-41292 Amazon Linux 2 - CVE-2026-46483: command injection in tar#Vimuntar() when decompressing .tgz archives, via a crafted filename expanded through cmdline-special; fixed by using the shellescape(args, 1) form for the :! command (runtime/autoload/tar.vim) Important TuxCare License Agreement CVE-2026-46483 Amazon Linux 2 - CVE-2026-41080: fix hash-flooding DoS caused by insufficient salt entropy by backporting SipHash-2-4 keyed hashing with a 16-byte salt sourced from /dev/urandom Low TuxCare License Agreement CVE-2026-41080 Amazon Linux 2 - CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes when hash randomization is enabled (bound as a weak symbol; falls back to the legacy XML_SetHashSalt when unavailable) to restore hash-flooding protection Critical TuxCare License Agreement CVE-2026-7210 Amazon Linux 2 - CVE-2020-25219: rewrite url::recvline non-recursively to prevent stack exhaustion - build i686 with -D_GLIBCXX_USE_CXX11_ABI=0 to link against the old-ABI libmodman.i686 in the amzn2els build root (x86_64 left untouched) Important TuxCare License Agreement CVE-2020-25219 Amazon Linux 2 - CVE-2016-4070: change php_raw_url_encode index counters to size_t to prevent integer overflow on very long input to rawurlencode() Important TuxCare License Agreement CVE-2016-4070 Amazon Linux 2 - CVE-2026-35535: make a privilege drop failure before running the mailer fatal Important TuxCare License Agreement CVE-2026-35535 Amazon Linux 2 - CVE-2026-45447: fix use-after-free in PKCS7_verify() when SignedData digestAlgorithms is an empty ASN.1 SET Critical TuxCare License Agreement CVE-2026-45447 Amazon Linux 2 - CVE-2026-42536: mod_xml2enc heap-based buffer overflow via xml2StartParse with untrusted content - CVE-2026-29170: mod_proxy_ftp cross-site scripting in HTML directory list generation - CVE-2026-29167: mod_ldap use-after-free in per-directory configuration - CVE-2026-42535: mod_dav_fs path handling allows direct manipulation of trusted DAV property databases - CVE-2026-34356: mod_proxy heap-based buffer overflow with malicious backend and ProxyPassReverseCookie* - CVE-2026-34355: mod_proxy_html buffer overflow allowing attack by an untrusted backend Critical TuxCare License Agreement CVE-2026-34355 CVE-2026-42536 CVE-2026-29170 CVE-2026-42535 CVE-2026-29167 CVE-2026-34356 Amazon Linux 2 - Fix CVE-2026-4408: reject dangerous account names and mask/single-quote the client-supplied username before it is substituted into 'check password script' via %u, export the raw name via SAMBA_CPS_ACCOUNT_NAME, and restrict _samr_ValidatePassword to domain controllers Critical TuxCare License Agreement CVE-2026-4408 Amazon Linux 2 - CVE-2026-49218: add a missing zero-dimension check in the DCM decoder (coders/dcm.c) so an image decoded with zero rows or columns can no longer trigger a denial of service in downstream operations - CVE-2026-49219: enforce the path security policy across followed symlinks in magick/blob.c so a symlink can no longer bypass a path-domain deny rule and disclose a restricted file - CVE-2026-53460: honor the system:max-memory-request policy in AcquireAlignedMemory (magick/memory.c) to prevent unbounded memory allocation from an oversized request - CVE-2026-53463: guard GenerateCoefficients (magick/distort.c) against a missing distort argument to avoid a NULL pointer dereference Important TuxCare License Agreement CVE-2026-49219 CVE-2026-53460 CVE-2026-53463 CVE-2026-49218 Amazon Linux 2 - CVE-2025-9714: keep and restore XPath context depth across recursive xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack overflow when the recursion limit was being reset prematurely Moderate TuxCare License Agreement CVE-2025-9714 Amazon Linux 2 - CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes (bound as a weak symbol; falls back to the legacy 8-byte XML_SetHashSalt when unavailable) to restore hash-flooding protection - adapt XMLPullParser chunked-feed tests to the reparse-deferral behavior of the TuxCare libexpat backport (upstream gh-115133) Important TuxCare License Agreement CVE-2026-7210 Amazon Linux 2 - CVE-2026-43951: mod_headers/mod_mime OOB read in merge_response_headers via multiple Content-Language values - CVE-2026-44119: mod_rewrite/mod_setenvif/mod_proxy_fcgi privilege escalation through expressions in .htaccess - CVE-2026-44185: mod_ssl OCSP outbound request stack buffer over-read with attacker-controlled responder - CVE-2026-44186: mod_proxy_ftp infinite loop via attacker-controlled backend FTP server - CVE-2026-44631: ap_regname heap underflow on crafted regular expressions in <Directory>/<Location>/<Files>/<Proxy> configuration - CVE-2026-48913: mod_http2 use-after-free when file handles are exhausted on upload requests Important TuxCare License Agreement CVE-2026-48913 CVE-2026-44185 CVE-2026-44186 CVE-2026-44119 CVE-2026-44631 CVE-2026-43951 Amazon Linux 2 - CVE-2026-47162: Vimscript code injection in s:NetrwBookHistSave() in the netrw plugin via crafted directory names interpolated into the ~/.vim/.netrwhist history file; fixed by properly escaping the value with string() (runtime/autoload/netrw.vim) Important TuxCare License Agreement CVE-2026-47162 Amazon Linux 2 - CVE-2026-52858: code execution via crafted Python module in omni-completion: exec() ran from/import statements in attacker-controlled buffers; fixed by disabling exec of import/from (runtime/autoload/python3complete.vim, pythoncomplete.vim, upstream patch 9.2.0561) - CVE-2026-52859: out-of-bounds read in update_snapshot() when a terminal cell fills all six VTERM_MAX_CHARS_PER_CELL combining-character slots; the unterminated cell.chars[] loop walked past the array and appended OOB values into the scrollback buffer (src/terminal.c, upstream patch 9.2.0565) - CVE-2026-52860: code execution via crafted Python def/class headers in omni-completion: parameter default-values, annotations, and base-class expressions were passed to exec() and evaluated; fixed by stripping defaults/annotations and whitelisting base-class expressions to dotted names (runtime/autoload/python3complete.vim, pythoncomplete.vim, upstream patch 9.2.0597) Important TuxCare License Agreement CVE-2026-52858 CVE-2026-52860 CVE-2026-52859 Amazon Linux 2 - CVE-2018-1000223: fix heap buffer overflow in WavInFile::readHeaderBlock() caused by an unchecked negative WAV "fmt " chunk length Important TuxCare License Agreement CVE-2018-1000223 Amazon Linux 2 - CVE-2026-55693: out-of-bounds write in tree_count_words() and sug_filltree() when walking a crafted spell-file word trie deeper than MAXWLEN; bound the descent depth (src/spellfile.c) - CVE-2026-55892: stack out-of-bounds write in dump_prefixes() on :spelldump with a crafted prefix trie exceeding MAXWLEN; bound the descent depth (src/spell.c) - CVE-2026-57455: stack out-of-bounds write in spell_soundfold_sofo() when soundfold() is given an over-length word with an active SOFO spell table; add the missing length guard to the single-byte path (src/spell.c) - CVE-2026-57456: code execution in Python omni-completion: buffer-supplied docstrings were emitted inside triple-quoted literals passed to exec(), allowing breakout; quote them with repr() (runtime/autoload/python3complete.vim, pythoncomplete.vim) Important TuxCare License Agreement CVE-2026-57456 CVE-2026-55892 CVE-2026-57455 CVE-2026-55693 Amazon Linux 2 - CVE-2026-6846: size reloc_info array by max target_index in xcoff_link_add_symbols to prevent heap-based buffer overflow Important TuxCare License Agreement CVE-2026-6846 Amazon Linux 2 - CVE-2026-11979: add bounds checks in xmlcatalog --shell usershell() to prevent stack buffer overflows when parsing overly long command lines Important TuxCare License Agreement CVE-2026-11979 Amazon Linux 2 - CVE-2026-58014: fix off-by-one heap under-read in g_key_file_get_locale_string_list() on empty key values - CVE-2026-58015: validate cookie_context in the DBUS_COOKIE_SHA1 client to prevent path-traversal arbitrary file reads - CVE-2026-58016: fix inverted <node> nesting guard in the D-Bus introspection XML parser (out-of-bounds read) Critical TuxCare License Agreement CVE-2026-58015 CVE-2026-58014 CVE-2026-58016 Amazon Linux 2 - CVE-2026-45664: complete AL2's Fix-CVE-2026-45664.patch (upstream 11ac03e5 only) with the follow-up fix 3d57d379 as Fix-CVE-2026-45664_2.patch, a hard MNG_MAX_LOOP_OPS cap on MNG LOOP/ENDL operations; the shipped ListLengthResource-gated guard defaults to unlimited and does not bound the loop-expansion DoS - CVE-2026-46520: complete AL2's Fix-CVE-2026-46520.patch (SetQuantumDepth guard only) with prerequisite upstream 7d1b54445 as Fix-CVE-2026-46520_2.patch, moving DestroyQuantumInfo after the do/while loop so the guard is reachable on multi-frame (adjoin) writes instead of dereferencing a freed pointer Important TuxCare License Agreement CVE-2026-46520 CVE-2026-45664 Amazon Linux 2 - CVE-2022-21619: improper handling of long NTLM client hostnames (JDK-8286526) - CVE-2022-21624: insufficient randomization of JNDI DNS port numbers (JDK-8286910) - CVE-2022-21626: excessive memory allocation in X.509 certificate parsing (JDK-8286533) - CVE-2022-21628: HttpServer no connection count limit (JDK-8286918) Moderate TuxCare License Agreement CVE-2024-21094 CVE-2022-21628 CVE-2025-53057 CVE-2024-21138 CVE-2022-21626 CVE-2022-21624 CVE-2022-21619 Amazon Linux 2 - CVE-2026-41992: Fix global buffer overflow in LZH decompression caused by reuse of shared decode tables Important TuxCare License Agreement CVE-2026-41992 Amazon Linux 2 - CVE-2026-58010: fix an off-by-one out-of-bounds read in GVariant normal-form checking (gvs_tuple_is_normal) - CVE-2026-58011: reject out-of-range results in g_date_time_add_full() instead of returning an invalid GDateTime - CVE-2026-58012: use byte-wise case changing in g_regex_replace() substitutions under G_REGEX_RAW - CVE-2026-58013: avoid a memcmp() read past the buffer end in g_io_channel_read_line() with multi-byte line terminators Important TuxCare License Agreement CVE-2026-58010 CVE-2026-58012 CVE-2026-58013 CVE-2026-58011 Amazon Linux 2 - CVE-2026-55957: enforce credential validation in JNDIRealm.bindAsUser when GSSAPI SASL is configured Important TuxCare License Agreement CVE-2026-55957 Amazon Linux 2 - CVE-2024-20952: constant-time RSA PKCS#1 v1.5 TLS premaster secret unpadding (JDK-8317547) Important TuxCare License Agreement CVE-2023-21830 CVE-2023-21843 CVE-2024-20952 CVE-2023-21938 CVE-2023-21937 CVE-2023-21954 CVE-2023-21939 Amazon Linux 2 - CVE-2026-58050: fix integer overflow in publickey attribute allocation (CVE-2026-58050) Important TuxCare License Agreement CVE-2026-58050 Amazon Linux 2 - CVE-2026-56361: out-of-bounds access in AcquireKernelBuiltIn() (magick/morphology.c) from an off-by-one in the user-kernel origin bounds check, which accepted xi/psi equal to the kernel width or height - CVE-2026-56367: integer overflow of image->rows * psd_info->channels in the PSD RLE reader (coders/psd.c ReadPSDMergedImage) leading to an undersized allocation and heap out-of-bounds access on the 32-bit (i686) build - CVE-2026-56368: memory leak of the acquired QuantumInfo in the raw-pixel writers (coders/bgr.c, cmyk.c, gray.c, rgb.c, ycbcr.c) when OpenBlob() fails and Write*Image returns early - CVE-2026-56370: out-of-bounds write in ConnectedComponentsImage() (magick/vision.c) where a user connected-components:keep/remove id indexes the object array without a range check - CVE-2026-56378: out-of-bounds write in the PCD Huffman decoder DecodeImage() (coders/pcd.c) where crafted input advances the output pointer past the end of the luma buffer Critical TuxCare License Agreement CVE-2026-56361 CVE-2026-56368 CVE-2026-56370 CVE-2026-56367 CVE-2026-56378 Amazon Linux 2 - CVE-2026-10536: fix HTTP/2 stream-dependency use-after-free by making CURLOPT_STREAM_DEPENDS/CURLOPT_STREAM_DEPENDS_E a no-op and stopping h2_pri_spec() from emitting cross-stream dependency references Important TuxCare License Agreement CVE-2026-10536 Amazon Linux 2 - CVE-2026-53462: complete the CheckPrimitiveExtent fix - create an unwind stack on allocation failure instead of leaving a stale buffer state Moderate TuxCare License Agreement CVE-2026-48994 CVE-2026-48734 CVE-2026-53462 Amazon Linux 2 - CVE-2026-61857: heap use-after-free in the XML entity parser (magick/xml-tree.c ParseEntities) via a crafted XMP profile; add a NULL check on the ResizeQuantumMemory return before it is dereferenced - CVE-2026-61870: memory leak of the pixel virtual-memory buffer in the VIFF encoder (coders/viff.c WriteVIFFImage) when the colormap allocation fails Important TuxCare License Agreement CVE-2026-61870 CVE-2026-61857 Amazon Linux 2 - CVE-2026-59999: make DisableForwarding=yes override PermitTunnel=yes in server_request_tun() (upstream 8dfe7ed6) - CVE-2026-60000: count postponed GSSAPI attempts against MaxAuthTries by finishing auth in input_gssapi_errtok(), fixing a pre-auth resource DoS (upstream 5d04ca6a) Important TuxCare License Agreement CVE-2026-59999 CVE-2026-60000 Amazon Linux 2 - CVE-2026-40468: change sofar to size_t in do_sub to avoid integer overflow Critical TuxCare License Agreement CVE-2026-40468 Amazon Linux 2 - CVE-2026-20213: fix integer overflow in Aspack-triggered PE rebuild size calculation leading to a heap buffer overflow - CVE-2026-20214: fix FSG unpacker section loop underflow causing an out-of-bounds write - CVE-2026-20215: fix 7z substream count overflow causing under-allocation and heap buffer overflow - CVE-2026-20216: enforce InstallShield extraction limits against cumulative decompressed output - CVE-2026-20217: fix PESpin unpacker cleanup bitmap tracking causing invalid free - CVE-2026-20243: fix ALZ archive parser out-of-bounds buffer write and scan-limit bypass leading to denial of service via crafted ALZ file Important TuxCare License Agreement CVE-2026-20214 CVE-2026-20243 CVE-2026-20213 CVE-2026-20217 CVE-2026-20216 CVE-2026-20215 Amazon Linux 2 - CVE-2026-58471: fix heap buffer overflow in filename charset conversion - CVE-2026-58472: fix integer/heap buffer overflow in html_quote_string Important TuxCare License Agreement CVE-2026-58472 CVE-2026-58471 Amazon Linux 2 - CVE-2026-40469: add overflow checking in do_sub to avoid buffer overrun on 32 bit systems Critical TuxCare License Agreement CVE-2026-40469 Amazon Linux 2 - CVE-2026-61866: memory leak in the JNG encoder: WriteOneJNGImage (coders/png.c) leaked the cloned JPEG alpha image and its image-info when opening the alpha blob failed; destroy both helper objects before raising the writer exception Important TuxCare License Agreement CVE-2026-61866 Amazon Linux 2 - CVE-2026-61863: memory leak in WriteGROUP4Image when temporary-file creation fails before releasing the cloned Huffman image Important TuxCare License Agreement CVE-2026-61863 Amazon Linux 2 - CVE-2026-15308: fix quadratic complexity in incremental parsing of long unterminated markup declarations in HTMLParser by buffering feed() input, preventing a CPU denial-of-service on uncontrolled data Important TuxCare License Agreement CVE-2026-15308 Amazon Linux 2 - Rebase to Amazon Linux 2 perl-5.16.3-299.amzn2.0.4 - Drop CVE-2026-8376 backport now included by the vendor - CVE-2026-13221: do not build a regex trie when the branch-to-tail delta would overflow the 16-bit next-offset field (GH#23388) - CVE-2026-57432: fix integer overflow in S_measure_struct on a large pack/unpack repeat count, avoiding an out-of-bounds heap read Critical TuxCare License Agreement CVE-2026-57432 CVE-2026-13221 Amazon Linux 2 - CVE-2026-15308: fix quadratic complexity (denial of service) in incremental parsing in html.parser.HTMLParser when an unterminated construct is fed across many feed() calls Important TuxCare License Agreement CVE-2026-15308 Amazon Linux 2 - CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions Moderate TuxCare License Agreement CVE-2026-47729 Amazon Linux 2 - CVE-2026-56003: property buffer overflow in computeProps / ComputeScaledProperties in src/bitmap/bitscale.c - Upstream commit dff957a5158da038a282a59a31fe736702732939 Important TuxCare License Agreement CVE-2026-56003 CVE-2026-56001 CVE-2026-56002 Amazon Linux 2 - CVE-2026-59856: arbitrary command execution in PHP omni-completion; a class/trait name from the edited buffer was interpolated unescaped into a search() pattern run via win_execute(), letting a single quote plus | inject Ex commands (:!); quote the name with string() (runtime/autoload/phpcomplete.vim). Adds a functional test. Important TuxCare License Agreement CVE-2026-59858 CVE-2026-59856 Amazon Linux 2 - CVE-2026-7260: uncontrolled recursion in phar_get_link_source(); a tar-based phar archive holding circular symlinks exhausts the C stack and crashes the PHP process - CVE-2026-7260: NULL pointer dereference in phar_get_fp_offset() reached from phar_get_entry_data() once phar_get_link_source() reports a circular chain; the phar:// stream read path had no guard (upstream bug #69720) - phar_get_link_location() permanently truncated entry->filename at the last '/', so a symlink chain walked with two cursors resolved later hops against the wrong directory; the separator is now restored - CVE-2026-9672: use of uninitialized memory in the bundled libgd GIF decoder; LWZReadByte_() left most of the LZW code table uninitialized and kept decoding after the end code Important TuxCare License Agreement CVE-2026-9672 CVE-2026-7260 Amazon Linux 2 - Merge of the Amazon Linux 2 cups package (cups-1.6.3-51.amzn2.0.9) Important TuxCare License Agreement CVE-2026-34980 CVE-2024-35235 CVE-2025-58060 Amazon Linux 2 - CVE-2026-45700: fix out-of-bounds heap write in planar bitmap decoder bounds check - CVE-2026-44421: fix out-of-bounds heap write in RDPGFX cache-to-surface bounds check Critical TuxCare License Agreement CVE-2026-40033 CVE-2026-45700 CVE-2026-44421 Amazon Linux 2 - CVE-2026-56407: prevent signed integer overflow of the entity textLen field by capping the entityValuePool length at INT_MAX in doProlog Important TuxCare License Agreement CVE-2026-56407 Amazon Linux 2 - CVE-2026-8927: detect proxy changes read from environment so Digest proxy auth state is flushed instead of leaking the Proxy-Authorization header for one proxy into a request sent through another - CVE-2026-8286: require an SSL configuration match before reusing a pooled connection for a clear-text transfer that may upgrade to TLS via STARTTLS - CVE-2026-8932: include the client certificate key, key type, key password, key blob and certificate type in SSL configuration matching so a connection or cached TLS session established with different mTLS credentials is not reused Important TuxCare License Agreement CVE-2026-8927 CVE-2026-8932 CVE-2026-8286 Amazon Linux 2 - CVE-2025-0689: fix heap-based buffer overflow in UDF filesystem module - CVE-2025-1125: fix integer overflow in HFS+ filesystem module Important TuxCare License Agreement CVE-2025-0678 CVE-2025-1125 CVE-2025-0689 Amazon Linux 2 - CVE-2026-4424: fix RAR LZSS window size mismatch after PPMd block (heap OOB read) Important TuxCare License Agreement CVE-2026-4424 Amazon Linux 2 - CVE-2024-12086: improve basis-file handling for --partial-dir, --backup-dir and --keep-dirlinks transfers - CVE-2026-29518: improve symlink handling when a daemon module resolves paths, confining them to the module instead of refusing symlinks Important TuxCare License Agreement CVE-2024-12085 Amazon Linux 2 - Rebase onto vendor freerdp-2.11.7-1.amzn2.0.12 - CVE-2026-64624: compile out parsing of command-line options embedded in .rdp files Important TuxCare License Agreement CVE-2026-64624 Amazon Linux 2 - CVE-2026-12064: honour --proto-default in the command line tool instead of guessing the scheme from the hostname, so the SSH host verification options are applied to a schemeless URL transferred over SCP or SFTP Important TuxCare License Agreement CVE-2026-12064 Amazon Linux 2 - CVE-2026-34502: heap buffer overflow in the memcached client, where an unterminated response line lets the length arithmetic in get_server_line() and the stat_read_* helpers underflow - CVE-2026-34501: heap buffer overflow in the redis client, where the unvalidated bulk-string length in grab_bulk_resp() drives allocation and underflows for lengths below two - CVE-2026-32327: unbounded element nesting accepted by the XML parser builds an arbitrarily deep tree that exhausts the stack when walked recursively; the parse now stops at APR_XML_MAX_DEPTH (256) Critical TuxCare License Agreement CVE-2026-32327 CVE-2026-34502 CVE-2026-34501 Amazon Linux 2 - CVE-2026-50252: draw outgoing UDP ports from a shared randomized pool so a source port can no longer be mapped to a worker thread for cache poisoning Critical TuxCare License Agreement CVE-2026-50252 Amazon Linux 2 - CVE-2026-66032: sftp_open() nullifies data after freeing it in the FX_OK branch, so a server that answers SSH_FXP_OPEN with SSH_FXP_STATUS/FX_OK and then makes the follow-up HANDLE request fail with anything other than EAGAIN can no longer drive the if(badness) arm into freeing the same pointer twice Important TuxCare License Agreement CVE-2026-66032 Amazon Linux 2 - CVE-2025-21587: constant-time RSA PKCS#1 v1.5 unpadding and TLS premaster secret version check (JDK-8337692) - CVE-2026-22016: apply secure processing to the DocumentBuilderFactory used by XPath evaluation (JDK-8370529, JDK-8356294) - CVE-2026-47063: enforce RFC 5652 signed attributes and RFC 3161 id-ct-TSTInfo content type (JDK-8381049) - CVE-2026-21945: restrict AIA caIssuer URIs via com.sun.security.allowedAIALocations (JDK-8368032) Important TuxCare License Agreement CVE-2026-21945 CVE-2026-22016 CVE-2026-47063 CVE-2025-21587 Amazon Linux 2 - CVE-2026-25749: fix buffer overflow in 'helpfile' option handling in get_tagfname(); replace unbounded STRCPY of p_hf with a bounded vim_strncpy leaving room for the "tags" suffix (src/tag.c). Adds a functional test Important TuxCare License Agreement CVE-2026-25749 Amazon Linux 2 - CVE-2024-33599: stack-based buffer overflow in nscd's addinnetgrX() when the netgroup cache mempool is exhausted and the response is built in a fixed-size on-stack struct instead of one sized for the request key - Treat 32-bit x86 as an auxiliary (multilib) arch, matching the i686 package set AWS publishes for this SRPM: runtime libraries only, no locale data - Skip the langpack sub-package generation on an auxiliary arch: it builds no packages there, and the oversized macro expansion is truncated by the rpm in the i686 chroot, which breaks the SRPM build Important TuxCare License Agreement CVE-2024-33599 Amazon Linux 2 - CVE-2023-3758: race condition in the AD GPO provider, where intermediate per-GPO results were written to the sysdb GPO result cache while another parallel access request read them, granting or denying access on incomplete policy data Important TuxCare License Agreement CVE-2023-3758 Amazon Linux 2 - rebase onto the Amazon Linux 2 2.56.1-9.amzn2.0.15 base; the previous ELS line was pinned to .0.13 and so sorted older than the distro package, which made every subpackage uninstallable - drop the ELS CVE-2026-58016 patch: the .0.14 base now carries the same upstream commit c9da977c178fbfc0e4caf99f9fdf5dc433d6fcc2 together with its unit test - inherit CVE-2026-16118 from the .0.15 base Important TuxCare License Agreement CVE-2024-52533 Amazon Linux 2 - CVE-2023-6516: bound the memory used to queue RBTDB tree-pruning events, so that recursive query patterns which continuously trigger cache-database maintenance can no longer exceed max-cache-size and exhaust host memory (DoS) - CVE-2023-6516 follow-up: make the tree-pruning queue per-node-lock bucketed and process it in quanta, so that the queue introduced above does not starve cache cleanup under load and let cache memory grow without bound - CVE-2023-6516 follow-up: handle a node being re-queued for tree pruning gracefully instead of asserting, and do not append a parent to a pruning list it is already on, avoiding an assertion failure (DoS) and pruning-list corruption reachable through normal cache activity - CVE-2023-6516 follow-up: adopt the pruning design upstream settled on in 9.16.49 - run tree pruning on a dedicated task with an unlimited quantum instead of sharing the quantum-1 cache database task, clean every eligible ancestor in a single pass, and re-create both tasks when the cache is flushed so that pruning keeps working after "rndc flush" Important TuxCare License Agreement CVE-2023-6516 Amazon Linux 2 - CVE-2016-4071: format string vulnerability in php_snmp_error(); the SNMP error text was passed to zend_throw_exception_ex() as the format argument, so a remote SNMP peer controlling the message could inject conversion specifiers when SNMP exceptions are enabled Critical TuxCare License Agreement CVE-2016-4071 Amazon Linux 2 - CVE-2019-11034: reject a MAKERNOTE IFD whose directory start lies beyond the value buffer to prevent an out-of-bounds read in php_ifd_get32s - CVE-2019-11035: thread the value buffer length into exif_iif_add_value and exif_iif_add_tag and bound every element read against it - CVE-2019-11036: ignore an IFD entry that is not above the offset base to prevent an out-of-bounds read in exif_process_IFD_TAG Critical TuxCare License Agreement CVE-2019-11036 CVE-2020-7059 CVE-2019-11039 CVE-2019-11034 CVE-2020-7060 CVE-2019-11035 CVE-2019-11040 Amazon Linux 2 - CVE-2026-0864: normalize CR and CRLF line endings to LF+TAB when writing multi-line configparser values so an attacker-controlled value cannot inject unexpected keys and sections into the generated file Important TuxCare License Agreement CVE-2026-0864 Amazon Linux 2 - CVE-2026-14669: reject POSIX timezone abbreviations longer than the to_char() format workspace budget in DCH_to_char()'s TZ/tz items instead of strcpy()ing past the palloc'd buffer (security hunk of upstream REL_14_STABLE 5fb3c63, shipped in 14.24) Important TuxCare License Agreement CVE-2026-14669 Amazon Linux 2 - CVE-2026-68743: validate auth_token_length in extract_authtok_v1() to prevent an out-of-bounds read from a crafted PAM protocol v1 request Important TuxCare License Agreement CVE-2026-68743 Amazon Linux 2 - CVE-2025-1861: allocate the HTTP redirect target path on the heap so a long Location value combined with the request URL is no longer silently truncated into a redirect to a wrong location Critical TuxCare License Agreement CVE-2019-11036 CVE-2020-7059 CVE-2025-1861 CVE-2024-8927 CVE-2019-11039 CVE-2025-1735 CVE-2019-11034 CVE-2020-7060 CVE-2019-11035 CVE-2019-9640 CVE-2019-11042 CVE-2019-11040 CVE-2019-11041 Amazon Linux 2 - CVE-2025-66628: add an overflow check before computing the TIM image size in ReadTIMImage (coders/tim.c) to prevent an out-of-bounds read on 32-bit systems - CVE-2026-25989: make the upper-boundary checks in CastDoubleToLong and CastDoubleToUnsigned (magick/image-private.h) inclusive so a value equal to the limit is clamped instead of reaching an undefined integer cast Important TuxCare License Agreement CVE-2025-66628 CVE-2026-25989 Amazon Linux 2 - CVE-2026-66338: reject chunk sizes carrying trailing garbage and chunk sizes that overflow goffset instead of parsing them permissively, narrowing an HTTP request smuggling differential - CVE-2026-66337: clamp the bytes returned by soup_filter_input_stream_read_until() to the caller buffer length when the boundary is found, preventing a heap buffer over-read Important TuxCare License Agreement CVE-2026-66338 CVE-2026-66337 Amazon Linux 2 - CVE-2024-56737: fix stack OOB write in HFS filesystem module - CVE-2024-45782: fix OOB write via unbounded HFS volume name copy in grub_hfs_mount() (same upstream commit 417547c1) Important TuxCare License Agreement CVE-2024-56737 CVE-2024-45782 Amazon Linux 2 - CVE-2016-10087: reset info_ptr->max_text when png_free_data() releases the text array, so a later png_set_text_2() reallocates instead of writing through the freed pointer (NULL pointer dereference). Important TuxCare License Agreement CVE-2016-10087 Amazon Linux 2 - CVE-2026-0864: normalize all line endings (CR, CRLF and LF) when writing multi-line configparser values so a value cannot inject extra keys Important TuxCare License Agreement CVE-2026-0864 Amazon Linux 2 - CVE-2019-12900: fix out-of-bounds write in BZ2_decompress when many selectors are present - CVE-2016-3189: fix use-after-free in bzip2recover Critical TuxCare License Agreement CVE-2019-12900 Amazon Linux 2 - CVE-2024-53899: Quote template strings in activation scripts Important TuxCare License Agreement CVE-2024-53899 Amazon Linux 2 - CVE-2026-53784: refuse attacker-planted symlinks when a daemon module resolves its absolute path with "use chroot = no" - CVE-2026-53786: strip the module-dir prefix before checking a client-supplied filter merge file against the module filter list - CVE-2026-53789: keep implied parent directories non-content so a peer cannot widen the scope of a --delete run - CVE-2026-53803: open the batch, motd, lock, log and config files refusing attacker-planted symlinks, and refuse a non-regular --read-batch file - CVE-2026-70459: reject a non-directory transfer-root file-list entry - CVE-2026-70463: parse "auth users" with conf_strtok so an @Group Name entry containing a space is not torn in two Critical TuxCare License Agreement CVE-2026-53784 CVE-2026-70463 CVE-2026-53803 CVE-2026-53786 CVE-2026-70459 CVE-2026-53789 Amazon Linux 2 - CVE-2026-56131: fix a use-after-free by refusing re-entrant XML_ResumeParser calls issued from inside handler callbacks; carries the prerequisite handler call-depth tracking, which also covers CVE-2026-50219 and CVE-2026-56412 Critical TuxCare License Agreement CVE-2026-56131 Amazon Linux 2 - CVE-2026-67288: NULL pointer dereference on a smartcard cache read whose szLookupName NDR pointer is zero; completes the vendor's backport, which left "data" uninitialised in PCSC_SCardReadCacheA() and the HashTable lookup in PCSC_SCardReadCacheW() unguarded against the resulting NULL key Important TuxCare License Agreement CVE-2026-67288 CVE-2026-67291 Amazon Linux 2 - CVE-2026-86420: release the MemoryResource reservation in OpenPixelCache() when the pixel-cache allocation fails, so repeated failures no longer exhaust the memory budget - CVE-2026-86421: destroy the group level's draw_info in MSLEndElement() when a <group> element closes, fixing a DrawInfo leak in the MSL decoder Important TuxCare License Agreement CVE-2026-86420 CVE-2026-86421 Amazon Linux 2 - CVE-2026-73282: avoid a potential realloc use-after-free in the ssh client when a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending, by passing a forwarding index instead of a raw options.remote_forwards pointer to ssh_confirm_remote_forward() (upstream 9910d5ef) Important TuxCare License Agreement CVE-2026-73282 Amazon Linux 2 - CVE-2026-76957: fix a use-after-free by covering the custom XML_Encoding convert/release callbacks with the handler call-depth tracking, so a same-parser call made from inside them is rejected Critical TuxCare License Agreement CVE-2026-76957 Amazon Linux 2 - CVE-2026-86138: add integer-overflow checks to the pool size calculation in xmlDictAddQString and cap the QName length in xmlDictQLookup to prevent a heap buffer overflow Critical TuxCare License Agreement CVE-2026-86138 Amazon Linux 2 - CVE-2026-80212: resolv: stop Resource::Generic.create from permanently registering a generated class as a Generic constant and a ClassHash entry for every unknown (type, class) pair, and compare generic resources and questions by TypeValue/ClassValue instead of class identity Important TuxCare License Agreement CVE-2026-80212 Amazon Linux 2 - CVE-2026-13608: fail the LDAP connection with CURLE_LOGIN_DENIED when the SASL negotiation ends without a completed mechanism instead of treating it as authenticated - CVE-2026-18924: make HTTP/2 server push transfers inherit the share from the parent handle, preventing a use-after-free during cleanup Important TuxCare License Agreement CVE-2026-18924 CVE-2026-13608 Amazon Linux 2 - CVE-2026-70456: reserve room for the trailing NULL before read_args stores it, so a post-dot daemon request that lands argc on maxargs cannot write one slot past the argv allocation Important TuxCare License Agreement CVE-2026-70456 Amazon Linux 2 - CVE-2026-86140: add bounds checks around the parenthesis writes in xmlSnprintfElements - CVE-2026-86141: check the xmlStrdup result in xmlRegNewParserCtxt so a failed allocation cannot leave a NULL parser cursor - CVE-2026-86142: make xmlStrlen saturate above INT_MAX and reject the saturated length in xmlXPtrEvalXPtrPart before sizing the buffer - CVE-2026-86143: check for integer overflow before passing a buffer length to the output write callback - CVE-2026-86144: propagate the document parse flags in xmlXIncludeProcess and xmlXIncludeProcessTree Critical TuxCare License Agreement CVE-2026-86140 CVE-2026-86144 CVE-2026-86142 CVE-2026-86141 CVE-2026-86143 Amazon Linux 2 - CVE-2026-53793: confine the alt-dest basis stat in try_dests and hard_link_check - CVE-2026-70458: skip the F_SUM read for ITEM_DELETED in log_formatted Important TuxCare License Agreement CVE-2026-70453 CVE-2026-70462 CVE-2026-70458 CVE-2026-53790 CVE-2026-53793 CVE-2026-70464 Amazon Linux 2 - CVE-2026-9669: latch the libbz2 error code in BZ2Decomp_decompress() and raise ValueError on any later decompress() call, so a BZ2Decompressor that already failed cannot re-enter BZ2_bzDecompress(); make the same error sticky for the C BZ2File read paths via a new Util_BzRead() wrapper, so a retried read()/readline() re-reports the original IOError instead of re-entering BZ2_bzDecompress() on the errored stream Important TuxCare License Agreement CVE-2026-9669 Amazon Linux 2 - CVE-2026-91953, CVE-2026-91964: heap buffer overflow in nego_send_negotiation_request(); the server-controlled LB_LOAD_BALANCE_INFO routing token was written into a fixed 512-byte stream with the only length gate running after the write. Add Stream_EnsureRemainingCapacity() guards before every write in the function and fail via the existing cleanup label. Important TuxCare License Agreement CVE-2026-91964 CVE-2026-91953 Amazon Linux 2 - rebase onto Amazon Linux 2 1.0.2k-24.amzn2.0.22 (CVE-2026-54874, CVE-2026-63072, and the "HollowByte" hardening fix); take AL2's own fix for CVE-2026-54874 and drop our openssl-1.0.2k-cve-2026-54874.patch; no new TuxCare ELS work ships here Important TuxCare License Agreement CVE-2026-54874 CVE-2026-63072 Amazon Linux 2 - CVE-2026-34079: fix arbitrary host file deletion via app-controlled ld.so cache symlink in flatpak_switch_symlink_and_remove - CVE-2026-90616: rebase onto the 1.0.9-10.amzn2.0.8 vendor base, which creates the per-app directories in flatpak_ensure_data_dir() and binds them into the sandbox in flatpak_run_setup_base_argv() through the fd-relative libglnx chase API Important TuxCare License Agreement CVE-2026-90616 Amazon Linux 2 - CVE-2026-67300: complete the fix, deep-clone NOTIFY_ICON_STATE_ORDER in the async update proxy; the vendor's patch covers only the WINDOW_STATE_ORDER half - CVE-2026-91956: out-of-bounds read in func_get_ep_desc() - CVE-2026-91957: use-after-free in the smartcard RDPDR device when worker thread creation fails after device registration - CVE-2026-91959: buffer over-read in rts_read_result() - CVE-2026-91963: uninitialized heap disclosure, Stream_New() now uses calloc Important TuxCare License Agreement CVE-2026-67300 CVE-2026-91963 CVE-2026-91957 CVE-2026-91959 CVE-2026-91956 Amazon Linux 2 - CVE-2026-93586: fix a use-after-free when ImagesToBlob() writes an image list to an in-memory blob - CVE-2026-93587: make the PCD and HALD readers honour the list-length resource limit when cloning scenes - CVE-2026-93588: fix a NULL pointer dereference when a PNM comment cannot be grown Moderate TuxCare License Agreement CVE-2026-93588 CVE-2026-93586 CVE-2026-93587 Amazon Linux 2 - CVE-2026-89158: fix integer overflows in the pattern compiler Critical TuxCare License Agreement CVE-2026-89158 Amazon Linux 2 - CVE-2026-55191: 32-bit multiplication overflow in avc444_ensure_buffer() under-allocates the intermediate YUV444 planes and the lumaData scratch buffer Critical TuxCare License Agreement CVE-2026-55191 CVE-2026-55194 Amazon Linux 2 - CVE-2026-84782: reset s->init_off to 0 in dtls1_retransmit_message() so a DTLS retransmission is read from the start of the queued message instead of the offset left by a write suspended on WANT_WRITE, and skip retransmission in dtls1_handle_timeout() while such a write is still parked - CVE-2026-35189: defer building the full name of a nameRelativeToCRLIssuer CRL distribution point out of setup_dp() and into crl_crldp_check(), so a certificate with many relative distribution points no longer caches one copy of the issuer name per entry Important TuxCare License Agreement CVE-2026-35189 CVE-2026-84782 Amazon Linux 2 - rebase onto Amazon Linux 2 1.7.3-15.amzn2.0.17; take the vendor's three new patches as Patch1020-Patch1022 and renumber the TuxCare patches to Patch1023-Patch1025. The vendor also renamed its 0.16 fix-buffer-overflow.patch to CVE-2026-81642.patch; the diff payload is byte-identical - CVE-2026-81634: add the missing first owner name and signature length bounds checks to rrset_canonical() in validator/val_sigcrypt.c, preventing a heap buffer overflow during RRset canonicalisation - CVE-2026-82717: carry the vendor's defence-in-depth bounds checks - restore the packet-buffer position on every malformed-name failure in pkt_dname_len(), and validate decompressed-name lengths, packet progress and the trailing copy length in rdata_copy(). 1.7.3 is not affected by the CNAME synthesis write itself: synth_cname_rrset() allocates its own storage with TTL zero and has no cache-min/cache-max rewrite through ttl_data into packet bytes - CVE-2026-85501: bound the DNSSEC work a single query may cause - key-tag matches capped at MAX_TAG_MATCHES (256), NSEC/NSEC3 verifications at MAX_VALIDATE_NSECS (8) per message, and new val-validation-attempts and val-hash-attempts options (default 32) capping signature verifications and DS hash computations per validator query state; oversized referral DS RRsets are shortened in the scrubber and val-clean-additional now defaults to no - keep the TuxCare CVE-2019-16866, CVE-2026-50252 and CVE-2026-33278 (NSEC3 half) backports Critical TuxCare License Agreement CVE-2026-81634 CVE-2026-81642 Amazon Linux 2 - carry upstream's tagtrap replay for CVE-2026-85501 (NLnet Labs commit a7fc80d8) as testdata/tagtrap_limit_2_shortends_ecdsa.crpl. This adds no security payload: the fix ships in AL2's CVE-2026-85501.patch (Patch1022) at 1.7.3-15.amzn2.0.17.tuxcare.els1. %check is unchanged and does not execute the file - its test target globs testdata/*.rpl - because Patch1022's oversized-DS-RRset scrubber guard (ITER_SCRUB_DS_MAX 20) truncates the replay's 24-record referral DS RRset before the key-tag explosion it asserts can occur Important TuxCare License Agreement CVE-2026-85501 Amazon Linux 2 - rebase to 1.4.6-1.amzn2.0.1 - the vendor fixes in this build: CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348 - drop the 6 TuxCare CVE backports; 1.4.6 already incorporates them - no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative Critical TuxCare License Agreement CVE-2025-20260 Amazon Linux 2 - CVE-2026-93990: reject a UTF-16 high surrogate that is not followed by a low surrogate, so malformed UTF-16 can no longer hide the following code unit from the tokenizer Important TuxCare License Agreement CVE-2026-66046 CVE-2026-93990 Amazon Linux 2 - CVE-2019-19246: heap buffer over-read in the bundled Oniguruma 4.7.1 str_lower_case_match(); the case-insensitive matcher advanced the target pointer during a multibyte case-fold comparison without re-checking it against the end of the buffer - CVE-2020-7062: NULL pointer dereference in the session upload-progress handler; an upload that ended before any file part was seen reached MULTIPART_EVENT_END with progress->data still unallocated, which was then dereferenced when session.upload_progress.cleanup was disabled - CVE-2021-21702: NULL pointer dereference in SoapClient; a malformed WSDL or XML response whose node carried no name was passed unchecked to soap_error1() and strcmp() - CVE-2021-21703: out-of-bounds read and write in the php-fpm scoreboard; an unprivileged worker could steer the root process past the end of the shared scoreboard array, allowing local privilege escalation - CVE-2024-11234: CRLF injection in the HTTP stream wrapper; with a proxy configured and request_fulluri enabled, a path containing CR or LF was pasted into the request line, permitting HTTP request smuggling - CVE-2025-1736: insufficient validation of end-of-line characters in user-supplied HTTP stream-wrapper headers; a header preceded by a bare LF, tab or space was accepted as present, which could suppress the Authorization header derived from URL credentials Important TuxCare License Agreement CVE-2022-31625 CVE-2020-7062 CVE-2023-0568 CVE-2025-1736 CVE-2021-21703 CVE-2023-0662 CVE-2021-21702 CVE-2024-11234 CVE-2019-19246 Amazon Linux 2 - CVE-2026-19445: look up the SNI callback's SSLContext from the SSL connection instead of a borrowed pointer, fixing a use-after-free when sni_callback switches the connection to another context - CVE-2026-19553: warn when SSLContext.wrap_bio() is called without server_hostname while check_hostname is enabled, and reject server_hostname/session in server mode Important TuxCare License Agreement CVE-2026-19553 CVE-2026-19445 Amazon Linux 2 - CVE-2026-76641: already fixed by Patch119, which includes upstream 98599f6d (correct dtdCopy sizing of defaultAttForName entries); declare it Important TuxCare License Agreement CVE-2026-76641 Amazon Linux 2 - CVE-2026-56153: mod_charset_lite: bound the partial character buffer in finish_partial_char Critical TuxCare License Agreement CVE-2026-56153 Amazon Linux 2 - CVE-2026-9669: record the libbz2 error code on BZ2Decompressor and refuse further decompress() calls, so a decompressor reused after an error cannot resume from an invalid state and write out of bounds - CVE-2026-82049: resolve a hardlink's target with os.path.realpath() so extracting a hard link to a symlink cannot relocate that symlink and expose or modify files outside the destination - CVE-2026-11940: re-filter the fallback member when hard link extraction falls back to extracting from the archive, and filter it under the link's own name, so a hard link to a deeper symlink cannot recreate that symlink at a shallower path outside the destination. Carries the CVE-2025-4330 fallback-filtering prerequisite (LinkFallbackError and makelink_with_filter), which this package did not have - CVE-2026-87910: skip the fallback member when the filter returns None for it under the link's name, instead of ignoring that result - CVE-2025-4435: skip a member the extraction filter rejects instead of extracting it unfiltered when TarFile.errorlevel is 0 Important TuxCare License Agreement CVE-2026-9669 CVE-2026-11940 CVE-2026-82049 Amazon Linux 2 - CVE-2026-53802: open the daemon secrets file, the client --password-file, --files-from and the --filter merge / per-directory merge files refusing attacker-planted symlinks -- confined beneath the module root on a daemon, owner-trust walk otherwise; getpassf() fstat()s the opened fd, not the path Important TuxCare License Agreement CVE-2026-53795 CVE-2026-53802 Amazon Linux 2 - CVE-2026-63292: mod_vhost_alias: bound the interpolated path in vhost_alias_interpolate() (stack buffer overflow) - CVE-2026-56154: mod_rewrite: fix use-after-free in lookup_variable() with %{LA-U:HTTP:...} - CVE-2026-46729: mod_heartmonitor: validate body and query in hm_handler() (NULL pointer dereference) - CVE-2026-56449: mod_proxy_html: do not dump content in pcomment() (out-of-bounds write) - CVE-2026-63686: mod_xml2enc: fix NULL pointer dereference in xml2enc_ffunc() on charset conversion failure - CVE-2026-63718: mod_proxy_uwsgi: fix Transfer-Encoding response smuggling in uwsgi_response() - CVE-2026-73636, CVE-2026-73637: mod_auth_digest: fix one-time-nonce replay and authentication state use-after-free (upstream 2.4.69 merge); AuthDigestQop now accepts only "auth" and RFC 2069 requests without qop are rejected Important TuxCare License Agreement CVE-2026-56154 CVE-2026-63292 CVE-2026-73636 CVE-2026-73637 CVE-2026-63718 CVE-2026-63686 CVE-2026-56449 CVE-2026-46729 Amazon Linux 2 - CVE-2026-53801: extend the fix to the sender outside a daemon: prevent it from listing a directory outside the transfer through a path component swapped for a symlink - CVE-2026-53797: prevent the sender from reading a file outside the transfer the same way - CVE-2026-53800: prevent --remove-source-files from deleting a file outside the transfer the same way Moderate TuxCare License Agreement CVE-2026-53797 CVE-2026-53800 CVE-2026-53801 Amazon Linux 2 - CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs Important TuxCare License Agreement CVE-2026-107890 CVE-2026-107885 Amazon Linux 2 - rebase to 3.5.20-17.amzn2.7.28; CVE-2026-61642 fixed by vendor - carry CVE-2026-47729: out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions Important TuxCare License Agreement CVE-2026-61642 Amazon Linux 2 - CVE-2026-106555: reset the GSSAPI client state before each authentication attempt so a partial attempt cannot be reused by a later one (upstream 670510d1) - CVE-2026-106553: store delegated GSSAPI credentials only once the GSSAPI client was authorized (upstream 6f9cd19a) - CVE-2026-106583: disallow '$' and '\' in a command-line supplied remote user name (upstream 0c4c9a7b) - CVE-2026-106585: reject compressed payloads that inflate beyond the maximum packet size (upstream e0f85d83) Important TuxCare License Agreement CVE-2026-106555 CVE-2026-106583 CVE-2026-106553 CVE-2026-106585 Amazon Linux 2 - CVE-2026-53785: create a transfer's implied parent directories and the generator's directory entries through the symlink-race-safe parent walk, so a symlink planted at a parent component cannot make a non-chrooted receiver create them outside the destination tree - CVE-2026-53783: complete the els3 fix, which was partial: add --confine-root so a restricted-directory server also refuses the names that arrive over the protocol (file-list names, --files-from lines, filter merge files), and have rrsync pass it; hand rsync a pinned receiver directory option and an existing directory destination as /proc/self/fd/N/. and any other existing destination as its pinned parent plus the leaf, so --partial-dir no longer discards completed files and a push onto an existing file no longer fails Important TuxCare License Agreement CVE-2026-53785 Amazon Linux 2 - CVE-2026-82049: resolve a hard link's target with os.path.realpath() before creating the link, so extracting a hard link to a symlink stored deeper in the archive cannot relocate that symlink to a shallower path where its relative target escapes the destination directory - CVE-2026-11940: re-filter the fallback member when hard link extraction falls back to extracting from the archive, and filter it under the link's own name, so a hard link to a deeper symlink cannot recreate that symlink at a shallower path outside the destination. Carries the CVE-2025-4330 fallback-filtering prerequisite (LinkFallbackError and makelink_with_filter), which this package did not have. Skip the member when the filter returns None for the link's own name, so a filter that skips rejected members cannot be bypassed the same way (CVE-2026-87910) - CVE-2025-4435: skip a member the extraction filter rejects instead of extracting it unfiltered when TarFile.errorlevel is 0 Important TuxCare License Agreement CVE-2025-4435 CVE-2025-4330 CVE-2026-11940 CVE-2026-82049 Amazon Linux 2 - CVE-2026-19445: look up the SSLContext in the servername callback from the SSL socket instead of the borrowed SSL_CTX callback argument, and unregister the callback when an SSLContext is deallocated, so a context released after the callback switched SSLSocket.context is never used Critical TuxCare License Agreement CVE-2026-19445 Amazon Linux 2 - sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564} Important TuxCare License Agreement CVE-2026-53359 CVE-2026-64600 CVE-2026-64564 Amazon Linux 2 - CVE-2026-109618: memory exhaustion and allocation size overflows bailed out in the middle of an operation, leaving engine state corrupted for the shutdown code; the process now reports the fatal error and terminates - CVE-2026-109619: request-scoped SAPI and core globals were left pointing at freed memory and could be reused by the next request after a bailout during request startup; they are now cleared at request end, unused and duplicate multipart part headers are dropped, and session upload progress is disabled Low TuxCare License Agreement CVE-2026-109619 CVE-2026-109618 Amazon Linux 2 - Rebase to Amazon Linux 2 kernel-5.10.270-271.1109.amzn2 patch line and upstream stable 5.10.272 - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - ipv4: free inet_opt and ireq_opt after an RCU grace period {CVE-2026-98432} - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - xfrm: fix stale skb->prev after async crypto steals a GSO segment {CVE-2026-68426} - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965} - xfrm: Duplicate SPI Handling {CVE-2025-39797} - ip6mr: do not clone dst in ip6mr_cache_report() {CVE-2026-90111} - af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109} - SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550} - SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537} - libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956} - netpoll: fix a use-after-free on shutdown path {CVE-2026-64424} - ip: orphan prefetched skbs before multicast forwarding {CVE-2026-89564} - net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550} - ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). {CVE-2026-74289} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266} - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188} - PCI: use generic driver_override infrastructure {CVE-2026-53120} - driver core: platform: use generic driver_override infrastructure {CVE-2026-31527} - loop: Fix use-after-free issues {CVE-2023-53111} - dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} - xfs: don't walk off the end of a directory data block {CVE-2024-41013} - netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131} - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} - bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577} - net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934} - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap {CVE-2021-47200} - smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864} - bpf: Prevent tail call between progs attached to different hooks {CVE-2024-50063} - xfrm: Don't clobber inner headers when already set {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091} Important TuxCare License Agreement CVE-2026-53131 CVE-2024-53168 CVE-2026-53091 CVE-2025-39797 CVE-2026-74289 CVE-2024-44934 CVE-2026-98432 CVE-2026-74550 CVE-2026-64109 CVE-2024-35864 CVE-2024-41013 CVE-2023-53577 CVE-2021-47200 CVE-2024-35939 CVE-2026-89564 CVE-2026-89550 CVE-2026-89537 CVE-2026-64424 CVE-2026-46266 CVE-2026-99999 CVE-2026-31527 CVE-2026-90111 CVE-2026-68426 CVE-2026-53120 CVE-2024-50063 CVE-2026-52956 CVE-2025-68188 CVE-2023-53111 Amazon Linux 2 - net: skbuff: propagate shared-frag marker in skb_zerocopy() - kprobes: Protect kprobe_blacklist with RCU {CVE-2026-89988} - bpf: Don't predict JMP32 pointer vs zero comparisons {CVE-2026-98041} - smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs {CVE-2026-98171} - smb: client: cancel reconnect work in clean_demultiplex_info() {CVE-2026-98175} - RDMA/core: Fix potential use after free in ib_free_cq() {CVE-2026-92508} - RDMA/core: Fix potential use after free in counter_release() {CVE-2026-92509} - netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392} - iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448} - iommu/amd: Fix clone_alias() to use the original device's devid {CVE-2026-53053} - xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181} - exfat: fix out-of-bounds access of directory entries {CVE-2024-53147} - btrfs: abort transaction on failure to update inode for hole punching and reflinking {CVE-2026-98269} - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk {CVE-2022-50300} - hwrng: core - fix rng list on registration error {CVE-2026-93163} - usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117} Important TuxCare License Agreement CVE-2026-98171 CVE-2026-93117 CVE-2026-98375 CVE-2026-23392 CVE-2022-50300 CVE-2024-53147 CVE-2026-98175 CVE-2026-92509 CVE-2026-89448 CVE-2026-98269 CVE-2026-53053 CVE-2026-46181 CVE-2026-98041 CVE-2026-92508 CVE-2026-89988 CVE-2026-93163 Amazon Linux 2 - CVE-2026-93577: regexp: avoid int overflow in the quantifier expansion size check - CVE-2026-97229: regexp: reject a compiled program too big for its offset type - CVE-2026-110264: regexp: reject overflowed repeat and null-check IDs in huge regexps Critical TuxCare License Agreement CVE-2026-110264 CVE-2026-93577 CVE-2026-97229 /etc/els-release Amazon Linux release 2 \(ELS by TuxCare\) 1 nettle nettle-devel minizip minizip-devel zlib zlib-devel zlib-static expat expat-devel expat-static gnutls gnutls-c++ gnutls-dane gnutls-devel gnutls-utils python python-debug python-devel python-libs python-test python-tools tkinter bind bind-chroot bind-devel bind-export-devel bind-export-libs bind-libs bind-libs-lite bind-license bind-lite-devel bind-pkcs11 bind-pkcs11-devel bind-pkcs11-libs bind-pkcs11-utils bind-sdb bind-sdb-chroot bind-utils php php-bcmath php-cli php-common php-dba php-devel php-embedded php-enchant php-fpm php-gd php-intl php-ldap php-mbstring php-mysqlnd php-odbc php-pdo php-pgsql php-process php-pspell php-recode php-snmp php-soap php-xml php-xmlrpc ImageMagick ImageMagick-c++ ImageMagick-c++-devel ImageMagick-devel ImageMagick-doc ImageMagick-perl sudo sudo-devel libxml2 libxml2-devel libxml2-python libxml2-static lemon sqlite sqlite-devel sqlite-doc sqlite-tcl wget libevent libevent-devel libevent-doc bash bash-doc tcpdump rsync binutils binutils-devel glib2 glib2-devel glib2-doc glib2-fam glib2-static glib2-tests openssl openssl-devel openssl-libs openssl-perl openssl-static libxslt libxslt-devel libxslt-python gssproxy ncurses ncurses-base ncurses-c++-libs ncurses-compat-libs ncurses-devel ncurses-libs ncurses-static ncurses-term python2-unbound python3-unbound unbound unbound-devel unbound-libs perl perl-CPAN perl-ExtUtils-CBuilder perl-ExtUtils-Embed perl-ExtUtils-Install perl-IO-Zlib perl-Locale-Maketext-Simple perl-Module-CoreList perl-Module-Loaded perl-Object-Accessor perl-Package-Constants perl-Pod-Escapes perl-Time-Piece perl-core perl-devel perl-libs perl-macros perl-tests procps-ng procps-ng-devel procps-ng-i18n cifs-utils cifs-utils-devel bsdcpio bsdtar libarchive libarchive-devel openjpeg openjpeg-devel openjpeg-libs bluez bluez-cups bluez-hid2hci bluez-libs bluez-libs-devel poppler poppler-cpp poppler-cpp-devel poppler-demos poppler-devel poppler-glib poppler-glib-devel poppler-qt poppler-qt-devel poppler-utils vim-X11 vim-common vim-data vim-enhanced vim-filesystem vim-minimal xxd cyrus-sasl cyrus-sasl-devel cyrus-sasl-gs2 cyrus-sasl-gssapi cyrus-sasl-ldap cyrus-sasl-lib cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain cyrus-sasl-scram cyrus-sasl-sql libcap libcap-devel libcap-static squid squid-migration-script squid-sysvinit libsoup libsoup-devel sendmail sendmail-cf sendmail-devel sendmail-doc sendmail-milter sendmail-sysvinit jasper jasper-devel jasper-libs jasper-utils libssh2 libssh2-devel libssh2-docs libtiff libtiff-devel libtiff-static libtiff-tools curl libcurl libcurl-devel dnsmasq dnsmasq-utils openssh openssh-askpass openssh-cavs openssh-clients openssh-keycat openssh-ldap openssh-server openssh-server-sysvinit pam_ssh_agent_auth glusterfs glusterfs-api glusterfs-api-devel glusterfs-cli glusterfs-client-xlators glusterfs-devel glusterfs-fuse glusterfs-libs glusterfs-rdma python2-gluster gdb gdb-doc gdb-gdbserver zip httpd httpd-devel httpd-filesystem httpd-manual httpd-tools mod_ldap mod_md mod_proxy_html mod_session mod_ssl cairo cairo-devel cairo-gobject cairo-gobject-devel cairo-tools postfix postfix-perl-scripts postfix-sysvinit libexif libexif-devel libexif-doc taglib taglib-devel taglib-doc trousers trousers-devel trousers-static freerdp freerdp-devel freerdp-libs libwinpr libwinpr-devel tomcat tomcat-admin-webapps tomcat-docs-webapp tomcat-el-2.2-api tomcat-javadoc tomcat-jsp-2.2-api tomcat-jsvc tomcat-lib tomcat-servlet-3.0-api tomcat-webapps tar flatpak flatpak-builder flatpak-devel flatpak-libs gvfs gvfs-afc gvfs-afp gvfs-archive gvfs-client gvfs-devel gvfs-fuse gvfs-goa gvfs-gphoto2 gvfs-mtp gvfs-smb gvfs-tests postgresql postgresql-contrib postgresql-devel postgresql-docs postgresql-libs postgresql-plperl postgresql-plpython postgresql-pltcl postgresql-server postgresql-static postgresql-test postgresql-upgrade libproxy libproxy-bin libproxy-devel libproxy-gnome libproxy-mozjs libproxy-networkmanager libproxy-python libproxy-webkitgtk3 ctdb ctdb-tests libsmbclient libsmbclient-devel libwbclient libwbclient-devel samba samba-client samba-client-libs samba-common samba-common-libs samba-common-tools samba-dc samba-dc-libs samba-devel samba-krb5-printing samba-libs samba-pidl samba-python samba-python-test samba-test samba-test-libs samba-vfs-glusterfs samba-winbind samba-winbind-clients samba-winbind-krb5-locator samba-winbind-modules python3 python3-debug python3-devel python3-libs python3-test python3-tkinter python3-tools soundtouch soundtouch-devel java-1.7.0-openjdk java-1.7.0-openjdk-accessibility java-1.7.0-openjdk-demo java-1.7.0-openjdk-devel java-1.7.0-openjdk-headless java-1.7.0-openjdk-javadoc java-1.7.0-openjdk-src gzip gawk clamav1.4 clamav1.4-data clamav1.4-devel clamav1.4-doc clamav1.4-filesystem clamav1.4-freshclam clamav1.4-lib clamav1.4-milter clamd1.4 libXfont2 libXfont2-devel cups cups-client cups-devel cups-filesystem cups-ipptool cups-libs cups-lpd grub2 grub2-common grub2-efi-x64 grub2-efi-x64-cdboot grub2-efi-x64-ec2 grub2-efi-x64-modules grub2-emu grub2-emu-modules grub2-pc grub2-pc-modules grub2-tools grub2-tools-efi grub2-tools-extra grub2-tools-minimal apr-util apr-util-bdb apr-util-devel apr-util-ldap apr-util-mysql apr-util-nss apr-util-odbc apr-util-openssl apr-util-pgsql apr-util-sqlite glibc glibc-all-langpacks glibc-benchtests glibc-common glibc-devel glibc-headers glibc-langpack-aa glibc-langpack-af glibc-langpack-ak glibc-langpack-am glibc-langpack-an glibc-langpack-anp glibc-langpack-ar glibc-langpack-as glibc-langpack-ast glibc-langpack-ayc glibc-langpack-az glibc-langpack-be glibc-langpack-bem glibc-langpack-ber glibc-langpack-bg glibc-langpack-bhb glibc-langpack-bho glibc-langpack-bn glibc-langpack-bo glibc-langpack-br glibc-langpack-brx glibc-langpack-bs glibc-langpack-byn glibc-langpack-ca glibc-langpack-ce glibc-langpack-chr glibc-langpack-cmn glibc-langpack-crh glibc-langpack-cs glibc-langpack-csb glibc-langpack-cv glibc-langpack-cy glibc-langpack-da glibc-langpack-de glibc-langpack-doi glibc-langpack-dv glibc-langpack-dz glibc-langpack-el glibc-langpack-en glibc-langpack-eo glibc-langpack-es glibc-langpack-et glibc-langpack-eu glibc-langpack-fa glibc-langpack-ff glibc-langpack-fi glibc-langpack-fil glibc-langpack-fo glibc-langpack-fr glibc-langpack-fur glibc-langpack-fy glibc-langpack-ga glibc-langpack-gd glibc-langpack-gez glibc-langpack-gl glibc-langpack-gu glibc-langpack-gv glibc-langpack-ha glibc-langpack-hak glibc-langpack-he glibc-langpack-hi glibc-langpack-hne glibc-langpack-hr glibc-langpack-hsb glibc-langpack-ht glibc-langpack-hu glibc-langpack-hy glibc-langpack-ia glibc-langpack-id glibc-langpack-ig glibc-langpack-ik glibc-langpack-is glibc-langpack-it glibc-langpack-iu glibc-langpack-ja glibc-langpack-ka glibc-langpack-kk glibc-langpack-kl glibc-langpack-km glibc-langpack-kn glibc-langpack-ko glibc-langpack-kok glibc-langpack-ks glibc-langpack-ku glibc-langpack-kw glibc-langpack-ky glibc-langpack-lb glibc-langpack-lg glibc-langpack-li glibc-langpack-lij glibc-langpack-ln glibc-langpack-lo glibc-langpack-lt glibc-langpack-lv glibc-langpack-lzh glibc-langpack-mag glibc-langpack-mai glibc-langpack-mg glibc-langpack-mhr glibc-langpack-mi glibc-langpack-mk glibc-langpack-ml glibc-langpack-mn glibc-langpack-mni glibc-langpack-mr glibc-langpack-ms glibc-langpack-mt glibc-langpack-my glibc-langpack-nan glibc-langpack-nb glibc-langpack-nds glibc-langpack-ne glibc-langpack-nhn glibc-langpack-niu glibc-langpack-nl glibc-langpack-nn glibc-langpack-nr glibc-langpack-nso glibc-langpack-oc glibc-langpack-om glibc-langpack-or glibc-langpack-os glibc-langpack-pa glibc-langpack-pap glibc-langpack-pl glibc-langpack-ps glibc-langpack-pt glibc-langpack-quz glibc-langpack-raj glibc-langpack-ro glibc-langpack-ru glibc-langpack-rw glibc-langpack-sa glibc-langpack-sat glibc-langpack-sc glibc-langpack-sd glibc-langpack-se glibc-langpack-sgs glibc-langpack-shs glibc-langpack-si glibc-langpack-sid glibc-langpack-sk glibc-langpack-sl glibc-langpack-so glibc-langpack-sq glibc-langpack-sr glibc-langpack-ss glibc-langpack-st glibc-langpack-sv glibc-langpack-sw glibc-langpack-szl glibc-langpack-ta glibc-langpack-tcy glibc-langpack-te glibc-langpack-tg glibc-langpack-th glibc-langpack-the glibc-langpack-ti glibc-langpack-tig glibc-langpack-tk glibc-langpack-tl glibc-langpack-tn glibc-langpack-tr glibc-langpack-ts glibc-langpack-tt glibc-langpack-ug glibc-langpack-uk glibc-langpack-unm glibc-langpack-ur glibc-langpack-uz glibc-langpack-ve glibc-langpack-vi glibc-langpack-wa glibc-langpack-wae glibc-langpack-wal glibc-langpack-wo glibc-langpack-xh glibc-langpack-yi glibc-langpack-yo glibc-langpack-yue glibc-langpack-zh glibc-langpack-zu glibc-locale-source glibc-minimal-langpack glibc-nss-devel glibc-static glibc-utils libcrypt libcrypt-nss nscd nss_db nss_hesiod nss_nis libipa_hbac libipa_hbac-devel libsss_autofs libsss_certmap libsss_certmap-devel libsss_idmap libsss_idmap-devel libsss_nss_idmap libsss_nss_idmap-devel libsss_simpleifp libsss_simpleifp-devel libsss_sudo python-libipa_hbac python-libsss_nss_idmap python-sss python-sss-murmur python-sssdconfig sssd sssd-ad sssd-client sssd-common sssd-common-pac sssd-dbus sssd-ipa sssd-kcm sssd-krb5 sssd-krb5-common sssd-ldap sssd-libwbclient sssd-libwbclient-devel sssd-polkit-rules sssd-proxy sssd-tools sssd-winbind-idmap libpng libpng-devel libpng-static bzip2 bzip2-devel bzip2-libs python-virtualenv ruby ruby-devel ruby-doc ruby-irb ruby-libs ruby-tcltk rubygem-bigdecimal rubygem-io-console rubygem-json rubygem-minitest rubygem-psych rubygem-rake rubygem-rdoc rubygems rubygems-devel pcre2 pcre2-devel pcre2-static pcre2-tools pcre2-utf16 pcre2-utf32 bpftool kernel kernel-devel kernel-headers kernel-tools kernel-tools-devel perf python-perf i686|x86_64 0:2.7.1-9.amzn2.tuxcare.els1 d07bf2a08d50eb66 x86_64 0:2.7.1-9.amzn2.tuxcare.els1 i686|x86_64 0:1.2.7-19.amzn2.0.3.tuxcare.els1 x86_64 0:1.2.7-19.amzn2.0.3.tuxcare.els1 i686|x86_64 0:2.1.0-15.0.6.amzn2.tuxcare.els1 x86_64 0:2.1.0-15.0.6.amzn2.tuxcare.els1 i686|x86_64 0:3.3.29-9.amzn2.0.3.tuxcare.els1 x86_64 0:3.3.29-9.amzn2.0.3.tuxcare.els1 i686|x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els1 x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els1 x86_64 0:2.7.18-1.amzn2.0.18.tuxcare.els2 i686|x86_64 0:2.7.18-1.amzn2.0.18.tuxcare.els2 x86_64 32:9.11.4-26.P2.amzn2.13.14.tuxcare.els1 i686|x86_64 32:9.11.4-26.P2.amzn2.13.14.tuxcare.els1 32:9.11.4-26.P2.amzn2.13.14.tuxcare.els1 x86_64 0:5.4.16-46.amzn2.0.6.tuxcare.els3 i686|x86_64 0:6.9.10.97-1.amzn2.0.24.tuxcare.els2 x86_64 0:6.9.10.97-1.amzn2.0.24.tuxcare.els2 i686|x86_64 0:6.9.10.97-1.amzn2.0.24.tuxcare.els3 x86_64 0:6.9.10.97-1.amzn2.0.24.tuxcare.els3 x86_64 0:6.9.10.97-1.amzn2.0.24.tuxcare.els1 x86_64 0:1.8.23-10.amzn2.3.8.tuxcare.els1 x86_64 0:2.9.1-6.amzn2.5.24.tuxcare.els1 x86_64 0:3.7.17-8.amzn2.1.3.tuxcare.els2 i686|x86_64 0:3.7.17-8.amzn2.1.3.tuxcare.els2 0:3.7.17-8.amzn2.1.3.tuxcare.els2 x86_64 0:1.14-18.amzn2.1.tuxcare.els1 i686|x86_64 0:2.0.21-4.amzn2.0.3.tuxcare.els1 x86_64 0:2.0.21-4.amzn2.0.3.tuxcare.els1 0:2.0.21-4.amzn2.0.3.tuxcare.els1 x86_64 0:4.2.46-34.amzn2.tuxcare.els1 x86_64 14:4.9.2-4.amzn2.1.0.1.tuxcare.els3 x86_64 14:4.9.2-4.amzn2.1.0.1.tuxcare.els1 x86_64 14:4.9.2-4.amzn2.1.0.1.tuxcare.els4 x86_64 0:3.1.2-12.0.1.amzn2.tuxcare.els3 x86_64 14:4.9.2-4.amzn2.1.0.1.tuxcare.els6 x86_64 0:2.29.1-31.amzn2.0.2.tuxcare.els10 x86_64 0:3.1.2-12.0.1.amzn2.tuxcare.els4 x86_64 0:5.4.16-46.amzn2.0.6.tuxcare.els4 x86_64 0:2.56.1-9.amzn2.0.13.tuxcare.els1 0:2.56.1-9.amzn2.0.13.tuxcare.els1 x86_64 1:1.0.2k-24.amzn2.0.17.tuxcare.els1 i686|x86_64 1:1.0.2k-24.amzn2.0.17.tuxcare.els1 i686|x86_64 0:1.1.28-6.amzn2.0.5.tuxcare.els1 x86_64 0:1.1.28-6.amzn2.0.5.tuxcare.els1 x86_64 0:0.7.0-17.amzn2.tuxcare.els1 x86_64 0:6.0-8.20170212.amzn2.1.8.tuxcare.els1 0:6.0-8.20170212.amzn2.1.8.tuxcare.els1 i686|x86_64 0:6.0-8.20170212.amzn2.1.8.tuxcare.els1 x86_64 0:1.7.3-15.amzn2.0.12.tuxcare.els1 i686|x86_64 0:1.7.3-15.amzn2.0.12.tuxcare.els1 x86_64 4:5.16.3-299.amzn2.0.3.tuxcare.els1 0:1.9800-299.amzn2.0.3.tuxcare.els1 1:0.28.2.6-299.amzn2.0.3.tuxcare.els1 0:1.30-299.amzn2.0.3.tuxcare.els1 0:1.58-299.amzn2.0.3.tuxcare.els1 1:1.10-299.amzn2.0.3.tuxcare.els1 1:0.21-299.amzn2.0.3.tuxcare.els1 1:2.76.02-299.amzn2.0.3.tuxcare.els1 1:0.08-299.amzn2.0.3.tuxcare.els1 1:0.42-299.amzn2.0.3.tuxcare.els1 1:0.02-299.amzn2.0.3.tuxcare.els1 1:1.04-299.amzn2.0.3.tuxcare.els1 x86_64 0:1.20.1-299.amzn2.0.3.tuxcare.els1 x86_64 0:5.16.3-299.amzn2.0.3.tuxcare.els1 i686|x86_64 4:5.16.3-299.amzn2.0.3.tuxcare.els1 i686|x86_64 0:3.3.10-26.amzn2.tuxcare.els1 x86_64 0:3.3.10-26.amzn2.tuxcare.els1 x86_64 0:6.2-10.amzn2.0.5.tuxcare.els3 x86_64 0:3.1.2-12.0.1.amzn2.tuxcare.els5 i686|x86_64 0:2.0.21-4.amzn2.0.3.tuxcare.els2 x86_64 0:2.0.21-4.amzn2.0.3.tuxcare.els2 0:2.0.21-4.amzn2.0.3.tuxcare.els2 x86_64 0:3.1.2-14.amzn2.0.6.tuxcare.els7 i686|x86_64 0:3.1.2-14.amzn2.0.6.tuxcare.els7 x86_64 0:1.5.1-19.amzn2.tuxcare.els1 i686|x86_64 0:1.5.1-19.amzn2.tuxcare.els1 x86_64 0:5.44-7.amzn2.0.4.tuxcare.els1 i686|x86_64 0:5.44-7.amzn2.0.4.tuxcare.els1 i686|x86_64 0:6.9.10.97-1.amzn2.0.26.tuxcare.els5 x86_64 0:6.9.10.97-1.amzn2.0.26.tuxcare.els5 i686|x86_64 0:0.26.5-43.amzn2.1.6.tuxcare.els1 x86_64 0:0.26.5-43.amzn2.1.6.tuxcare.els1 x86_64 2:9.0.2153-1.amzn2.0.5.tuxcare.els1 2:9.0.2153-1.amzn2.0.5.tuxcare.els1 x86_64 0:2.1.26-24.amzn2.0.1.tuxcare.els1 i686|x86_64 0:2.1.26-24.amzn2.0.1.tuxcare.els1 x86_64 0:2.7.18-1.amzn2.0.18.tuxcare.els3 i686|x86_64 0:2.7.18-1.amzn2.0.18.tuxcare.els3 i686|x86_64 0:2.54-1.amzn2.0.3.tuxcare.els1 x86_64 0:2.54-1.amzn2.0.3.tuxcare.els1 x86_64 7:3.5.20-17.amzn2.7.26.tuxcare.els1 i686|x86_64 0:2.56.0-6.amzn2.0.7.tuxcare.els1 x86_64 0:2.56.0-6.amzn2.0.7.tuxcare.els1 x86_64 0:8.14.7-5.amzn2.0.1.tuxcare.els1 0:8.14.7-5.amzn2.0.1.tuxcare.els1 i686|x86_64 0:8.14.7-5.amzn2.0.1.tuxcare.els1 x86_64 0:1.900.1-33.amzn2.0.1.tuxcare.els6 i686|x86_64 0:1.900.1-33.amzn2.0.1.tuxcare.els6 i686|x86_64 0:1.4.3-12.amzn2.2.6.tuxcare.els1 x86_64 0:1.4.3-12.amzn2.2.6.tuxcare.els1 0:1.4.3-12.amzn2.2.6.tuxcare.els1 i686|x86_64 0:4.0.3-35.amzn2.0.30.tuxcare.els1 x86_64 0:4.0.3-35.amzn2.0.30.tuxcare.els1 x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els1 i686|x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els1 x86_64 0:2.76-17.amzn2.1.5.3.tuxcare.els3 x86_64 0:7.4p1-22.amzn2.0.12.tuxcare.els1 x86_64 0:0.10.3-2.22.amzn2.0.12.tuxcare.els1 x86_64 0:3.12.2-18.amzn2.0.2.tuxcare.els1 i686|x86_64 0:3.12.2-18.amzn2.0.2.tuxcare.els1 x86_64 0:8.0.1-36.amzn2.0.2.tuxcare.els1 0:8.0.1-36.amzn2.0.2.tuxcare.els1 x86_64 0:5.4.16-46.amzn2.0.6.tuxcare.els5 x86_64 0:3.0-11.amzn2.0.2.tuxcare.els1 x86_64 0:2.4.66-1.amzn2.0.1.tuxcare.els1 0:2.4.66-1.amzn2.0.1.tuxcare.els1 x86_64 1:2.4.66-1.amzn2.0.1.tuxcare.els1 i686|x86_64 0:1.15.12-4.amzn2.0.1.tuxcare.els1 x86_64 0:1.15.12-4.amzn2.0.1.tuxcare.els1 x86_64 2:2.10.1-6.amzn2.0.4.tuxcare.els1 2:2.10.1-6.amzn2.0.4.tuxcare.els1 i686|x86_64 0:0.6.22-2.amzn2.tuxcare.els1 x86_64 0:0.6.22-2.amzn2.tuxcare.els1 i686|x86_64 0:1.8-8.20130218git.amzn2.tuxcare.els2 x86_64 0:1.8-8.20130218git.amzn2.tuxcare.els2 0:1.8-8.20130218git.amzn2.tuxcare.els2 i686|x86_64 0:0.3.14-2.amzn2.0.2.tuxcare.els1 x86_64 0:0.3.14-2.amzn2.0.2.tuxcare.els1 x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els2 i686|x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els2 x86_64 0:2.76-17.amzn2.1.5.3.tuxcare.els4 x86_64 2:2.11.7-1.amzn2.0.11.tuxcare.els1 i686|x86_64 2:2.11.7-1.amzn2.0.11.tuxcare.els1 i686|x86_64 0:3.3.29-9.amzn2.0.3.tuxcare.els3 x86_64 0:3.3.29-9.amzn2.0.3.tuxcare.els3 x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els3 i686|x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els3 i686|x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els2 x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els2 0:7.0.76-10.amzn2.0.16.tuxcare.els1 x86_64 2:1.26-35.amzn2.0.4.tuxcare.els1 x86_64 0:5.4.16-46.amzn2.0.6.tuxcare.els6 x86_64 0:1.7.3-15.amzn2.0.12.tuxcare.els2 i686|x86_64 0:1.7.3-15.amzn2.0.12.tuxcare.els2 i686|x86_64 0:6.9.10.97-1.amzn2.0.27.tuxcare.els2 x86_64 0:6.9.10.97-1.amzn2.0.27.tuxcare.els2 x86_64 0:3.1.2-12.0.1.amzn2.tuxcare.els6 x86_64 0:1.0.9-10.amzn2.0.7.tuxcare.els1 x86_64 0:1.0.0-10.amzn2.0.7.tuxcare.els1 x86_64 0:3.1.2-12.0.1.amzn2.tuxcare.els7 0:7.0.76-10.amzn2.0.16.tuxcare.els2 x86_64 0:1.36.2-3.amzn2.0.2.tuxcare.els1 x86_64 0:9.2.24-8.amzn2.0.9.tuxcare.els1 i686|x86_64 0:9.2.24-8.amzn2.0.9.tuxcare.els1 x86_64 2:9.0.2153-1.amzn2.0.6.tuxcare.els2 2:9.0.2153-1.amzn2.0.6.tuxcare.els2 x86_64 32:9.11.4-26.P2.amzn2.13.15.tuxcare.els1 i686|x86_64 32:9.11.4-26.P2.amzn2.13.15.tuxcare.els1 32:9.11.4-26.P2.amzn2.13.15.tuxcare.els1 x86_64 0:3.1.2-12.0.1.amzn2.tuxcare.els8 x86_64 4:5.16.3-299.amzn2.0.3.tuxcare.els2 0:1.9800-299.amzn2.0.3.tuxcare.els2 1:0.28.2.6-299.amzn2.0.3.tuxcare.els2 0:1.30-299.amzn2.0.3.tuxcare.els2 0:1.58-299.amzn2.0.3.tuxcare.els2 1:1.10-299.amzn2.0.3.tuxcare.els2 1:0.21-299.amzn2.0.3.tuxcare.els2 1:2.76.02-299.amzn2.0.3.tuxcare.els2 1:0.08-299.amzn2.0.3.tuxcare.els2 1:0.42-299.amzn2.0.3.tuxcare.els2 1:0.02-299.amzn2.0.3.tuxcare.els2 1:1.04-299.amzn2.0.3.tuxcare.els2 x86_64 0:1.20.1-299.amzn2.0.3.tuxcare.els2 x86_64 0:5.16.3-299.amzn2.0.3.tuxcare.els2 i686|x86_64 4:5.16.3-299.amzn2.0.3.tuxcare.els2 x86_64 0:1.7.3-15.amzn2.0.14.tuxcare.els1 i686|x86_64 0:1.7.3-15.amzn2.0.14.tuxcare.els1 x86_64 2:9.0.2153-1.amzn2.0.6.tuxcare.els3 2:9.0.2153-1.amzn2.0.6.tuxcare.els3 i686|x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els3 x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els3 x86_64 0:2.7.18-1.amzn2.0.19.tuxcare.els2 i686|x86_64 0:2.7.18-1.amzn2.0.19.tuxcare.els2 i686|x86_64 0:0.4.11-10.amzn2.0.3.tuxcare.els1 x86_64 0:0.4.11-10.amzn2.0.3.tuxcare.els1 0:0.4.11-10.amzn2.0.3.tuxcare.els1 x86_64 0:5.4.16-46.amzn2.0.7.tuxcare.els2 x86_64 0:1.8.23-10.amzn2.3.8.tuxcare.els2 x86_64 1:1.0.2k-24.amzn2.0.20.tuxcare.els1 i686|x86_64 1:1.0.2k-24.amzn2.0.20.tuxcare.els1 x86_64 0:2.4.67-1.amzn2.0.1.tuxcare.els2 0:2.4.67-1.amzn2.0.1.tuxcare.els2 x86_64 1:2.4.67-1.amzn2.0.1.tuxcare.els2 x86_64 0:4.10.16-24.amzn2.0.5.tuxcare.els1 i686|x86_64 0:4.10.16-24.amzn2.0.5.tuxcare.els1 0:4.10.16-24.amzn2.0.5.tuxcare.els1 i686|x86_64 0:6.9.10.97-1.amzn2.0.29.tuxcare.els2 x86_64 0:6.9.10.97-1.amzn2.0.29.tuxcare.els2 i686|x86_64 0:2.9.1-6.amzn2.5.24.tuxcare.els2 x86_64 0:2.9.1-6.amzn2.5.24.tuxcare.els2 i686|x86_64 0:3.7.16-1.amzn2.0.26.tuxcare.els1 x86_64 0:3.7.16-1.amzn2.0.26.tuxcare.els1 x86_64 0:2.4.67-1.amzn2.0.1.tuxcare.els3 0:2.4.67-1.amzn2.0.1.tuxcare.els3 x86_64 1:2.4.67-1.amzn2.0.1.tuxcare.els3 x86_64 2:9.0.2153-1.amzn2.0.6.tuxcare.els4 2:9.0.2153-1.amzn2.0.6.tuxcare.els4 x86_64 2:9.0.2153-1.amzn2.0.6.tuxcare.els5 2:9.0.2153-1.amzn2.0.6.tuxcare.els5 i686|x86_64 0:1.4.0-9.amzn2.0.1.tuxcare.els1 x86_64 0:1.4.0-9.amzn2.0.1.tuxcare.els1 x86_64 2:9.0.2153-1.amzn2.0.7.tuxcare.els2 2:9.0.2153-1.amzn2.0.7.tuxcare.els2 x86_64 0:2.29.1-31.amzn2.0.2.tuxcare.els11 i686|x86_64 0:2.9.1-6.amzn2.5.24.tuxcare.els3 x86_64 0:2.9.1-6.amzn2.5.24.tuxcare.els3 i686|x86_64 0:2.56.1-9.amzn2.0.13.tuxcare.els2 x86_64 0:2.56.1-9.amzn2.0.13.tuxcare.els2 0:2.56.1-9.amzn2.0.13.tuxcare.els2 i686|x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els2 x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els2 x86_64 1:1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els2 1:1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els2 x86_64 0:1.5-10.amzn2.0.1.tuxcare.els1 i686|x86_64 0:2.56.1-9.amzn2.0.13.tuxcare.els3 x86_64 0:2.56.1-9.amzn2.0.13.tuxcare.els3 0:2.56.1-9.amzn2.0.13.tuxcare.els3 0:7.0.76-10.amzn2.0.16.tuxcare.els3 x86_64 1:1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els4 1:1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els4 i686|x86_64 0:1.4.3-12.amzn2.2.7.tuxcare.els2 x86_64 0:1.4.3-12.amzn2.2.7.tuxcare.els2 0:1.4.3-12.amzn2.2.7.tuxcare.els2 i686|x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els3 x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els3 x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els4 i686|x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els4 i686|x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els4 x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els4 i686|x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els5 x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els5 x86_64 0:7.4p1-22.amzn2.0.13.tuxcare.els2 x86_64 0:0.10.3-2.22.amzn2.0.13.tuxcare.els2 x86_64 0:4.0.2-4.amzn2.1.3.tuxcare.els1 x86_64 0:1.4.4-1.amzn2.0.1.tuxcare.els1 0:1.4.4-1.amzn2.0.1.tuxcare.els1 x86_64 0:1.14-18.amzn2.1.tuxcare.els2 x86_64 0:4.0.2-4.amzn2.1.3.tuxcare.els2 i686|x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els6 x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els6 i686|x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els7 x86_64 0:6.9.10.97-1.amzn2.0.30.tuxcare.els7 x86_64 0:2.7.18-1.amzn2.0.20.tuxcare.els2 i686|x86_64 0:2.7.18-1.amzn2.0.20.tuxcare.els2 x86_64 4:5.16.3-299.amzn2.0.4.tuxcare.els1 0:1.9800-299.amzn2.0.4.tuxcare.els1 1:0.28.2.6-299.amzn2.0.4.tuxcare.els1 0:1.30-299.amzn2.0.4.tuxcare.els1 0:1.58-299.amzn2.0.4.tuxcare.els1 1:1.10-299.amzn2.0.4.tuxcare.els1 1:0.21-299.amzn2.0.4.tuxcare.els1 1:2.76.02-299.amzn2.0.4.tuxcare.els1 1:0.08-299.amzn2.0.4.tuxcare.els1 1:0.42-299.amzn2.0.4.tuxcare.els1 1:0.02-299.amzn2.0.4.tuxcare.els1 1:1.04-299.amzn2.0.4.tuxcare.els1 x86_64 0:1.20.1-299.amzn2.0.4.tuxcare.els1 x86_64 0:5.16.3-299.amzn2.0.4.tuxcare.els1 i686|x86_64 4:5.16.3-299.amzn2.0.4.tuxcare.els1 i686|x86_64 0:3.7.16-1.amzn2.0.26.tuxcare.els2 x86_64 0:3.7.16-1.amzn2.0.26.tuxcare.els2 x86_64 7:3.5.20-17.amzn2.7.27.tuxcare.els2 i686|x86_64 0:2.0.3-1.amzn2.tuxcare.els3 x86_64 0:2.0.3-1.amzn2.tuxcare.els3 x86_64 2:9.0.2153-1.amzn2.0.7.tuxcare.els4 2:9.0.2153-1.amzn2.0.7.tuxcare.els4 x86_64 0:5.4.16-46.amzn2.0.7.tuxcare.els3 x86_64 1:1.6.3-52.amzn2.tuxcare.els5 1:1.6.3-52.amzn2.tuxcare.els5 i686|x86_64 1:1.6.3-52.amzn2.tuxcare.els5 x86_64 2:2.11.7-1.amzn2.0.11.tuxcare.els2 i686|x86_64 2:2.11.7-1.amzn2.0.11.tuxcare.els2 i686|x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els4 x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els4 x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els5 i686|x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els5 x86_64 1:2.06-14.amzn2.0.7.tuxcare.els1 1:2.06-14.amzn2.0.7.tuxcare.els1 x86_64 0:3.1.2-14.amzn2.0.6.tuxcare.els8 i686|x86_64 0:3.1.2-14.amzn2.0.6.tuxcare.els8 x86_64 0:3.1.2-12.0.1.amzn2.tuxcare.els9 x86_64 2:2.11.7-1.amzn2.0.12.tuxcare.els1 i686|x86_64 2:2.11.7-1.amzn2.0.12.tuxcare.els1 x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els6 i686|x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els6 i686|x86_64 0:1.6.3-1.amzn2.0.1.tuxcare.els1 x86_64 0:1.6.3-1.amzn2.0.1.tuxcare.els1 x86_64 0:1.7.3-15.amzn2.0.14.tuxcare.els2 i686|x86_64 0:1.7.3-15.amzn2.0.14.tuxcare.els2 i686|x86_64 0:1.4.3-12.amzn2.2.8.tuxcare.els2 x86_64 0:1.4.3-12.amzn2.2.8.tuxcare.els2 0:1.4.3-12.amzn2.2.8.tuxcare.els2 x86_64 1:1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els5 1:1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els5 x86_64 2:9.0.2153-1.amzn2.0.9.tuxcare.els2 2:9.0.2153-1.amzn2.0.9.tuxcare.els2 i686|x86_64 0:2.26-64.amzn2.0.6.tuxcare.els1 x86_64 0:2.26-64.amzn2.0.6.tuxcare.els1 i686|x86_64 0:1.16.5-12.amzn2.15.tuxcare.els1 x86_64 0:1.16.5-12.amzn2.15.tuxcare.els1 0:1.16.5-12.amzn2.15.tuxcare.els1 i686|x86_64 0:2.56.1-9.amzn2.0.15.tuxcare.els5 x86_64 0:2.56.1-9.amzn2.0.15.tuxcare.els5 0:2.56.1-9.amzn2.0.15.tuxcare.els5 x86_64 32:9.11.4-26.P2.amzn2.13.17.tuxcare.els2 i686|x86_64 32:9.11.4-26.P2.amzn2.13.17.tuxcare.els2 32:9.11.4-26.P2.amzn2.13.17.tuxcare.els2 x86_64 0:5.4.16-46.amzn2.0.7.tuxcare.els4 x86_64 0:5.4.16-46.amzn2.0.7.tuxcare.els6 x86_64 0:2.7.18-1.amzn2.0.22.tuxcare.els2 i686|x86_64 0:2.7.18-1.amzn2.0.22.tuxcare.els2 x86_64 0:9.2.24-8.amzn2.0.10.tuxcare.els2 i686|x86_64 0:9.2.24-8.amzn2.0.10.tuxcare.els2 i686|x86_64 0:1.16.5-12.amzn2.15.tuxcare.els2 x86_64 0:1.16.5-12.amzn2.15.tuxcare.els2 0:1.16.5-12.amzn2.15.tuxcare.els2 x86_64 0:5.4.16-46.amzn2.0.7.tuxcare.els9 i686|x86_64 0:6.9.10.97-1.amzn2.0.31.tuxcare.els2 x86_64 0:6.9.10.97-1.amzn2.0.31.tuxcare.els2 i686|x86_64 0:2.56.0-6.amzn2.0.7.tuxcare.els2 x86_64 0:2.56.0-6.amzn2.0.7.tuxcare.els2 x86_64 1:2.06-14.amzn2.0.7.tuxcare.els2 1:2.06-14.amzn2.0.7.tuxcare.els2 i686|x86_64 2:1.5.13-8.amzn2.0.9.tuxcare.els1 x86_64 2:1.5.13-8.amzn2.0.9.tuxcare.els1 i686|x86_64 0:3.7.16-1.amzn2.0.29.tuxcare.els2 x86_64 0:3.7.16-1.amzn2.0.29.tuxcare.els2 x86_64 0:1.0.6-13.amzn2.0.3.tuxcare.els1 i686|x86_64 0:1.0.6-13.amzn2.0.3.tuxcare.els1 0:15.1.0-4.amzn2.tuxcare.els1 x86_64 0:3.1.2-12.0.1.amzn2.tuxcare.els10 i686|x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els6 x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els6 x86_64 2:2.11.7-1.amzn2.0.14.tuxcare.els2 i686|x86_64 2:2.11.7-1.amzn2.0.14.tuxcare.els2 i686|x86_64 0:6.9.10.97-1.amzn2.0.31.tuxcare.els3 x86_64 0:6.9.10.97-1.amzn2.0.31.tuxcare.els3 x86_64 0:7.4p1-22.amzn2.0.13.tuxcare.els3 x86_64 0:0.10.3-2.22.amzn2.0.13.tuxcare.els3 i686|x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els7 x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els7 i686|x86_64 0:2.9.1-6.amzn2.5.26.tuxcare.els2 x86_64 0:2.9.1-6.amzn2.5.26.tuxcare.els2 x86_64 0:2.0.0.648-36.amzn2.0.20.tuxcare.els1 0:2.0.0.648-36.amzn2.0.20.tuxcare.els1 i686|x86_64 0:2.0.0.648-36.amzn2.0.20.tuxcare.els1 x86_64 0:1.2.0-36.amzn2.0.20.tuxcare.els1 x86_64 0:0.4.2-36.amzn2.0.20.tuxcare.els1 x86_64 0:1.7.7-36.amzn2.0.20.tuxcare.els1 0:4.3.2-36.amzn2.0.20.tuxcare.els1 x86_64 0:2.0.0-36.amzn2.0.20.tuxcare.els1 0:0.9.6-36.amzn2.0.20.tuxcare.els1 0:4.0.0-36.amzn2.0.20.tuxcare.els1 0:2.0.14.1-36.amzn2.0.20.tuxcare.els1 x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els7 i686|x86_64 0:8.3.0-1.amzn2.0.12.tuxcare.els7 x86_64 0:3.1.2-12.0.1.amzn2.tuxcare.els13 i686|x86_64 0:2.9.1-6.amzn2.5.26.tuxcare.els3 x86_64 0:2.9.1-6.amzn2.5.26.tuxcare.els3 x86_64 0:3.1.2-12.0.1.amzn2.tuxcare.els15 x86_64 0:2.7.18-1.amzn2.0.22.tuxcare.els3 i686|x86_64 0:2.7.18-1.amzn2.0.22.tuxcare.els3 x86_64 2:2.11.7-1.amzn2.0.15.tuxcare.els2 i686|x86_64 2:2.11.7-1.amzn2.0.15.tuxcare.els2 x86_64 1:1.0.2k-24.amzn2.0.22.tuxcare.els1 i686|x86_64 1:1.0.2k-24.amzn2.0.22.tuxcare.els1 x86_64 0:1.0.9-10.amzn2.0.8.tuxcare.els1 x86_64 0:1.0.0-10.amzn2.0.8.tuxcare.els1 x86_64 2:2.11.7-1.amzn2.0.15.tuxcare.els3 i686|x86_64 2:2.11.7-1.amzn2.0.15.tuxcare.els3 i686|x86_64 0:6.9.10.97-1.amzn2.0.31.tuxcare.els4 x86_64 0:6.9.10.97-1.amzn2.0.31.tuxcare.els4 aarch64|i686|x86_64 0:10.23-11.amzn2.0.2.tuxcare.els1 aarch64|i686|x86_64 2:2.11.7-1.amzn2.0.15.tuxcare.els4 aarch64|i686|x86_64 1:1.0.2k-24.amzn2.0.22.tuxcare.els2 aarch64|i686|x86_64 0:1.7.3-15.amzn2.0.17.tuxcare.els1 aarch64|i686|x86_64 0:1.7.3-15.amzn2.0.17.tuxcare.els2 aarch64|x86_64 0:1.4.6-1.amzn2.0.1.tuxcare.els1 0:1.4.6-1.amzn2.0.1.tuxcare.els1 aarch64|i686|x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els9 aarch64|x86_64 0:5.4.16-46.amzn2.0.7.tuxcare.els10 aarch64|i686|x86_64 0:3.7.16-1.amzn2.0.29.tuxcare.els3 aarch64|i686|x86_64 0:2.1.0-15.0.7.amzn2.tuxcare.els10 aarch64|i686|x86_64 0:2.4.68-1.amzn2.0.1.tuxcare.els2 0:2.4.68-1.amzn2.0.1.tuxcare.els2 aarch64|i686|x86_64 1:2.4.68-1.amzn2.0.1.tuxcare.els2 aarch64|i686|x86_64 0:3.7.16-1.amzn2.0.29.tuxcare.els4 aarch64|i686|x86_64 0:3.1.2-12.0.1.amzn2.tuxcare.els17 aarch64|i686|x86_64 0:2.4.68-1.amzn2.0.1.tuxcare.els3 0:2.4.68-1.amzn2.0.1.tuxcare.els3 aarch64|i686|x86_64 1:2.4.68-1.amzn2.0.1.tuxcare.els3 aarch64|i686|x86_64 0:3.1.2-12.0.5.amzn2.tuxcare.els2 aarch64|i686|x86_64 1:1.6.3-52.0.1.amzn2.tuxcare.els2 1:1.6.3-52.0.1.amzn2.tuxcare.els2 aarch64|i686|x86_64 7:3.5.20-17.amzn2.7.28.tuxcare.els1 aarch64|i686|x86_64 0:7.4p1-22.amzn2.0.13.tuxcare.els4 aarch64|i686|x86_64 0:0.10.3-2.22.amzn2.0.13.tuxcare.els4 aarch64|i686|x86_64 0:3.1.2-12.0.5.amzn2.tuxcare.els4 aarch64|i686|x86_64 0:2.7.18-1.amzn2.0.22.tuxcare.els4 aarch64|i686|x86_64 0:2.7.18-1.amzn2.0.22.tuxcare.els5 (^5\.10\.259\-((?:(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|259)(?:\.\d+)*|258\.(?:\d{5,}|[2-9]\d{3}|1[1-9]\d{2}|10[5-9]\d|104[7-9])(?:\.\d+)*|258\.1046\.\d+(?:\.\d+)*)\.amzn2\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:258\.1046)\.amzn2\.tuxcare\.\d+(?:\.els\d*)?\.(?:x86_64|i686)|(?:258\.1046)\.amzn2\.tuxcare\.els(?:\d{2,}|[2-9])\.(?:x86_64|i686))$) x86_64 0:5.10.259-258.1046.amzn2.tuxcare.els2 aarch64|x86_64 0:5.4.16-46.amzn2.0.7.tuxcare.els11 (^5\.10\.272\-((?:(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|27[2-9])(?:\.\d+)*|271\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d)(?:\.\d+)*|271\.1109\.\d+(?:\.\d+)*)\.amzn2\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:271\.1109)\.amzn2\.tuxcare\.\d+(?:\.els\d*)?\.(?:x86_64|i686)|(?:271\.1109)\.amzn2\.tuxcare\.els(?:\d{2,}|[1-9])\.(?:x86_64|i686))$) x86_64 0:5.10.272-271.1109.amzn2.tuxcare.els1 (^5\.10\.272\-((?:(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|27[2-9])(?:\.\d+)*|271\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d)(?:\.\d+)*|271\.1109\.\d+(?:\.\d+)*)\.amzn2\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:271\.1109)\.amzn2\.tuxcare\.\d+(?:\.els\d*)?\.(?:x86_64|i686)|(?:271\.1109)\.amzn2\.tuxcare\.els(?:\d{2,}|[2-9])\.(?:x86_64|i686))$) x86_64 0:5.10.272-271.1109.amzn2.tuxcare.els2 aarch64|i686|x86_64 0:2.0.0.648-36.amzn2.0.20.tuxcare.els2 0:2.0.0.648-36.amzn2.0.20.tuxcare.els2 aarch64|i686|x86_64 0:1.2.0-36.amzn2.0.20.tuxcare.els2 aarch64|i686|x86_64 0:0.4.2-36.amzn2.0.20.tuxcare.els2 aarch64|i686|x86_64 0:1.7.7-36.amzn2.0.20.tuxcare.els2 0:4.3.2-36.amzn2.0.20.tuxcare.els2 aarch64|i686|x86_64 0:2.0.0-36.amzn2.0.20.tuxcare.els2 0:0.9.6-36.amzn2.0.20.tuxcare.els2 0:4.0.0-36.amzn2.0.20.tuxcare.els2 0:2.0.14.1-36.amzn2.0.20.tuxcare.els2