Tuxcare Errata System 0.0.1 5.10 2026-07-24T13:12:04 Red Hat Enterprise Linux 8 - CVE-2026-2003: fix memory disclosure via oidvector type Important TuxCare License Agreement CVE-2025-12818 CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 cpe:/o:redhat:enterprise_linux:8 Red Hat Enterprise Linux 8 - CVE-2022-21724: ensure arbitrary classes can't be passed instead of SocketFactory, SSLSocketFactory, CallbackHandler, HostnameVerifier - Restore testing from previous spec versions, exclude broken tests Critical TuxCare License Agreement CVE-2022-21724 cpe:/o:redhat:enterprise_linux:8 Red Hat Enterprise Linux 8 - CVE-2026-32636: out-of-bounds write of a single zero byte in ConvertUTF16ToUTF8 via NewXMLTree when resizing UTF-8 buffer Important TuxCare License Agreement CVE-2026-32636 cpe:/o:redhat:enterprise_linux:8 Red Hat Enterprise Linux 8 - CVE-2026-33900: integer truncation/wraparound in the viff encoder that could trigger an out-of-bounds heap write on 32-bit builds (GHSA-v67w-737x-v2c9; upstream b6c01a5a23f1e350ebe2db78c7cc326db2e320c9) - CVE-2026-33905: out-of-bounds read in SampleImage when sample:offset is set via -sample define (GHSA-pcvx-ph33-r5vv; upstream 140fc7b01fa7d870b3bc8453fb7adccfb7c1e202 with follow-up 8d73954bf7e13a352e71a32cf7d18905577f17e8) Critical TuxCare License Agreement CVE-2025-53101 CVE-2026-33900 CVE-2026-33905 cpe:/o:redhat:enterprise_linux:8 Red Hat Enterprise Linux 8 - CVE-2026-42050: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool Low TuxCare License Agreement CVE-2026-42050 cpe:/o:redhat:enterprise_linux:8 Red Hat Enterprise Linux 8 - CVE-2026-28689: fix path policy TOCTOU symlink race allowing read/write of policy-denied files - CVE-2026-28692: fix heap buffer over-read in MAT decoder caused by 32-bit integer overflow Moderate TuxCare License Agreement CVE-2026-28692 CVE-2026-28689 cpe:/o:redhat:enterprise_linux:8 Red Hat Enterprise Linux 8 - CVE-2026-6473: formatting.c / contrib intarray / ltree: avoid integer overflow in size calculations - CVE-2026-6474: timeofday / pg_strftime: guard against unsafe format codes and ensure null-termination on overflow - CVE-2026-6475: prevent path traversal in pg_basebackup and pg_rewind via path_is_safe_for_extraction() - CVE-2026-6477: libpq: harden PQfn() / pqFunctionCall3 against server-controlled buffer overruns in lo_read() - CVE-2026-6478: authentication: add timingsafe_bcmp() helper and apply it in MD5 / SCRAM / RADIUS / plain auth paths - CVE-2026-6479: postmaster: bound SSL/GSS negotiation recursion in ProcessStartupPacket() - CVE-2026-6637: refint contrib: prevent SQL injection and buffer overruns in check_primary_key / check_foreign_key Low TuxCare License Agreement CVE-2026-6637 CVE-2026-6473 CVE-2026-6474 CVE-2026-6479 CVE-2026-6477 CVE-2026-6478 CVE-2026-6475 cpe:/o:redhat:enterprise_linux:8 Red Hat Enterprise Linux 8 - CVE-2026-45358: off-by-one out-of-bounds read in the meta (8BIM/IPTC) encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder (zero rows/columns) - CVE-2026-53461: heap buffer over-write in the ICON decoder due to an incorrect loop bound - CVE-2026-53463: NULL pointer dereference in the distort operation on missing arguments - CVE-2026-53460: missing maximum-memory-request check in AcquireAlignedMemory - CVE-2026-46692: heap buffer over-write in the distributed pixel cache server - CVE-2026-46693: file-descriptor hijacking race in the distributed pixel cache server - CVE-2026-47166: heap buffer over-read in the distributed pixel cache server Critical TuxCare License Agreement CVE-2026-46559 CVE-2026-47166 CVE-2026-53460 CVE-2026-46693 CVE-2026-53463 CVE-2026-45358 CVE-2026-53461 CVE-2026-49218 CVE-2026-46692 cpe:/o:redhat:enterprise_linux:8 Red Hat Enterprise Linux 8 - CVE-2026-33901: out-of-bounds heap write in the MVG decoder (RenderMVGContent) when copying oversized gradient/pattern bodies into the token buffer - CVE-2026-33908: stack exhaustion via uncontrolled recursion in DestroyXMLTree when freeing a deeply nested XML document Important TuxCare License Agreement CVE-2026-33901 CVE-2026-33908 cpe:/o:redhat:enterprise_linux:8 Red Hat Enterprise Linux 8 - Rebase to upstream 6.9.13.50, matching EPEL 8 ImageMagick-6.9.13.50-1.el8 - Drop the TuxCare CVE patches whose fixes are included in the upstream 6.9.13.50 release - Keep the MSL empty-image crash fix (partial backport of upstream fde1f305, not present in the legacy 6.x line) - CVE-2026-45664: free the chunk buffer on the MNG LOOP/ENDL op-cap abort path (upstream dd198f960, not yet included in 6.9.13.50) to prevent a heap memory leak when the loop-operation limit is hit Critical TuxCare License Agreement CVE-2026-46523 CVE-2026-56361 CVE-2026-46520 CVE-2026-56368 CVE-2026-48733 CVE-2025-43965 CVE-2026-45359 CVE-2026-46522 CVE-2026-48994 CVE-2026-42326 CVE-2026-45624 CVE-2026-46521 CVE-2026-48734 CVE-2026-45031 CVE-2026-56370 CVE-2026-56367 CVE-2026-56378 CVE-2026-45664 cpe:/o:redhat:enterprise_linux:8 Red Hat Enterprise Linux 8 - CVE-2026-61863: fix a memory leak in WriteGROUP4Image when a temporary file can not be created or opened Important TuxCare License Agreement CVE-2026-61870 CVE-2026-61861 CVE-2026-61863 CVE-2026-61857 cpe:/o:redhat:enterprise_linux:8 /etc/els-release Red Hat Enterprise Linux release 8\.10 \(ELS by TuxCare\) 1 /etc/dnf/modules.d/postgresql.module \[postgresql\][\w\W]* 1 postgresql postgresql-contrib postgresql-docs postgresql-plperl postgresql-plpython3 postgresql-pltcl postgresql-server postgresql-server-devel postgresql-static postgresql-test postgresql-test-rpm-macros postgresql-upgrade postgresql-upgrade-devel postgresql-jdbc postgresql-jdbc-javadoc ImageMagick ImageMagick-c++ ImageMagick-c++-devel ImageMagick-devel ImageMagick-djvu ImageMagick-doc ImageMagick-libs ImageMagick-perl \nstream\s*=\s*13\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*13\b x86_64 0:13.23-2.module_el8+2364+b49622e4.tuxcare.els1 199e2f91fd431d51 d07bf2a08d50eb66 0:13.23-2.module_el8+2364+b49622e4.tuxcare.els1 0:42.2.14-3.el8_9.tuxcare.els1 x86_64 0:6.9.13.25-1.el8.tuxcare.els27 x86_64 0:6.9.13.25-1.el8.tuxcare.els28 x86_64 0:6.9.13.25-1.el8.tuxcare.els30 x86_64 0:6.9.13.25-1.el8.tuxcare.els31 x86_64 0:13.23-2.module_el8+2415+b49622e4.tuxcare.els2 0:13.23-2.module_el8+2415+b49622e4.tuxcare.els2 x86_64 0:6.9.13.25-1.el8.tuxcare.els32 x86_64 0:6.9.13.25-1.el8.tuxcare.els34 x86_64 0:6.9.13.50-1.el8.tuxcare.els1 x86_64 0:6.9.13.50-1.el8.tuxcare.els4